LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
LinkBack Search this Thread
Old 09-04-2006, 11:38 AM   #1
dansawyer
Member
 
Registered: Mar 2005
Posts: 122

Rep: Reputation: 15
audit avc: denied messages ?


The system is FC5 on a 2 x pentium III server. demsg and /var/log/messages show many entries of the following format:

audit(1157383402.314:193): avc: denied { setattr } for pid=3130 comm="rsync" name="grub" dev=sda2 ino=983044 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir

They are apparently related to selinux, what do they mean?

I 'copied' the system from one partition to another. Did this totally destroy the selinux base? If so is there a way to re-initialize selinux?

Thanks, Dan
 
Old 09-04-2006, 03:44 PM   #2
dansawyer
Member
 
Registered: Mar 2005
Posts: 122

Original Poster
Rep: Reputation: 15
Here are some more messages. They appear to be associated with yum? Does anyone know what these messages mean or where they can be diagnosed?

Thanks - Dan

audit(1157401280.753:443): avc: denied { write } for pid=4621 comm="yum" name="tmp" dev=sda2 ino=803376 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.753:444): avc: denied { remove_name } for pid=4621 comm="yum" name="rpm-tmp.70512" dev=sda2 ino=803394 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.753:445): avc: denied { write } for pid=4621 comm="yum" name="log" dev=tmpfs ino=5730 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:device_t:s0 tclass=sock_file
audit(1157401280.785:446): avc: denied { add_name } for pid=4621 comm="yum" name="rpm-tmp.70512" scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401280.813:447): avc: denied { getattr } for pid=4621 comm="yum" name="udevcontrol.8.gz" dev=sda2 ino=234471 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:man_t:s0 tclass=lnk_file
audit(1157401281.617:448): avc: denied { read } for pid=4621 comm="yum" name="headers" dev=sda2 ino=803202 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=dir
audit(1157401281.965:449): avc: denied { append } for pid=4621 comm="yum" name="yum.log" dev=sda2 ino=803316 scontext=user_u:system_r:hotplug_t:s0 tcontext=system_ubject_r:file_t:s0 tclass=file
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Why audit:avc:denied for jk-runtime-status? stonegu Linux - Newbie 2 04-13-2007 03:21 PM
audit cupsd denied message spooon Fedora 3 07-15-2006 09:25 PM
/var/log/messages - kernel: audit(1107868785.573:0): avc: denied { getattr } lothario Linux - Security 2 02-10-2005 04:24 AM
Adaptec AVC 1100 slothpuck Linux - Hardware 0 12-23-2004 04:32 PM
Audit Log Messages "denied" shortsword Linux - Newbie 0 10-03-2004 05:46 AM


All times are GMT -5. The time now is 12:31 AM.

Main Menu
 
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: @linuxquestions
Open Source Consulting | Domain Registration