LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-04-2006, 11:38 AM   #1
dansawyer
Member
 
Registered: Mar 2005
Posts: 124

Rep: Reputation: 15
audit avc: denied messages ?


The system is FC5 on a 2 x pentium III server. demsg and /var/log/messages show many entries of the following format:

audit(1157383402.314:193): avc: denied { setattr } for pid=3130 comm="rsync" name="grub" dev=sda2 ino=983044 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir

They are apparently related to selinux, what do they mean?

I 'copied' the system from one partition to another. Did this totally destroy the selinux base? If so is there a way to re-initialize selinux?

Thanks, Dan
 
Old 09-04-2006, 03:44 PM   #2
dansawyer
Member
 
Registered: Mar 2005
Posts: 124

Original Poster
Rep: Reputation: 15
Here are some more messages. They appear to be associated with yum? Does anyone know what these messages mean or where they can be diagnosed?

Thanks - Dan

audit(1157401280.753:443): avc: denied { write } for pid=4621 comm="yum" name="tmp" dev=sda2 ino=803376 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.753:444): avc: denied { remove_name } for pid=4621 comm="yum" name="rpm-tmp.70512" dev=sda2 ino=803394 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.753:445): avc: denied { write } for pid=4621 comm="yum" name="log" dev=tmpfs ino=5730 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:device_t:s0 tclass=sock_file
audit(1157401280.785:446): avc: denied { add_name } for pid=4621 comm="yum" name="rpm-tmp.70512" scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.813:447): avc: denied { getattr } for pid=4621 comm="yum" name="udevcontrol.8.gz" dev=sda2 ino=234471 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:man_t:s0 tclass=lnk_file
audit(1157401281.617:448): avc: denied { read } for pid=4621 comm="yum" name="headers" dev=sda2 ino=803202 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401281.965:449): avc: denied { append } for pid=4621 comm="yum" name="yum.log" dev=sda2 ino=803316 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=file
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Why audit:avc:denied for jk-runtime-status? stonegu Linux - Newbie 2 04-13-2007 03:21 PM
audit cupsd denied message spooon Fedora 3 07-15-2006 09:25 PM
/var/log/messages - kernel: audit(1107868785.573:0): avc: denied { getattr } lothario Linux - Security 2 02-10-2005 04:24 AM
Adaptec AVC 1100 slothpuck Linux - Hardware 0 12-23-2004 04:32 PM
Audit Log Messages "denied" shortsword Linux - Newbie 0 10-03-2004 05:46 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 07:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration