LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-30-2013, 09:41 AM   #1
Meditator
LQ Newbie
 
Registered: Mar 2004
Posts: 4

Rep: Reputation: 0
Some services starting failed when bootup


I installed centos in Vitualbox, these days it starts very slow, and some services couldn't start when initializing, the services are : auditd, system logger, rpcbind, NFS statd and sshd.

The content of boot.log is:
Quote:
Welcome to CentOS
Starting udev: [ OK ]
Setting hostname Centz: [ OK ]
Setting up Logical Volume Management: 2 logical volume(s) in volume group "vg_centz" now active [ OK ]
Checking filesystems
/dev/mapper/vg_centz-lv_root: clean, 51358/2403744 files, 558388/9603072 blocks
/dev/sda1: clean, 38/128016 files, 56876/512000 blocks [ OK ]
Remounting root filesystem in read-write mode: [ OK ]
Mounting local filesystems: [ OK ]
Enabling /etc/fstab swaps: [ OK ]
Entering non-interactive startup
Starting monitoring for VG vg_centz: 2 logical volume(s) in volume group "vg_centz" monitored [ OK ]
ip6tables: Applying firewall rules: [ OK ]
iptables: Applying firewall rules: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface eth0: [ OK ]
Bringing up interface eth1:
Determining IP information for eth1... done. [ OK ]
Starting auditd: [FAILED]
Starting system logger: [FAILED]
Starting rpcbind: [FAILED]
Starting NFS statd: [FAILED]
Starting RPC idmapd: [ OK ]
Starting lldpad:[ OK ]
Starting FCoE initiator service: [ OK ]
Mounting other filesystems: [ OK ]
acpid: starting upon: [ OK ]
acpid: 1 rule loaded
acpid: waiting for events: event logging is off
Retrigger failed udev events [ OK ]
Starting sshd: [FAILED
The audit.log is empty, and there're many "denied" in the dmesg info:
Quote:
type=1400 audit(1369922558.304 : 4) : avc : denied { write } for pid=729 comm="dmesg" path="/var/log/dmesg" dev=dm-0 ino=261646 scontext=system_u : system_r : dmesg_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=file
type=1400 audit(1369922566.205 : 5) : avc : denied { search } for pid=965 comm="dhclient" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : dhcpc_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
...
type=1400 audit(1369922566.224 : 11) : avc : denied { search } for pid=966 comm="dhclient-script" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : dhcpc_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
...
type=1400 audit(1369922571.830 : 22) : avc : denied { search } for pid=1059 comm="auditd" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : auditd_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
...
type=1400 audit(1369922571.983 : 24) : avc : denied { search } for pid=1066 comm="rsyslogd" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : syslogd_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
...
type=1400 audit(1369922872.314 : 29) : avc : denied { search } for pid=1086 comm="rpcbind" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : rpcbind_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
type=1400 audit(1369922872.558 : 30) : avc : denied { write } for pid=1103 comm="rpc.statd" name="run" dev=dm-0 ino=261908 scontext=system_u : system_r : rpcd_t : s0 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
type=1400 audit(1369922874.618 : 31) : avc : denied { search } for pid=1212 comm="sshd" name="var" dev=dm-0 ino=261633 scontext=system_u : system_r : sshd_t : s0-s0 : c0.c1023 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=dir
...
type=1400 audit(1369923188.250 : 34) : avc : denied { read } for pid=1253 comm="login" name="utmp" dev=dm-0 ino=261638 scontext=system_u : system_r : local_login_t : s0-s0 : c0.c1023 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=file
...
type=1400 audit(1369923188.254 : 42) : avc : denied { read write } for pid=1253 comm="login" name="lastlog" dev=dm-0 ino=261925 scontext=system_u : system_r : local_login_t : s0-s0 : c0.c1023 tcontext=system_u : object_r : httpd_user_content_t : s0 tclass=file
Could anybody help me ?
 
Old 05-30-2013, 12:34 PM   #2
sibe
Member
 
Registered: Apr 2011
Location: Jakarta, Indonesia
Distribution: Fedora, CentOS
Posts: 122

Rep: Reputation: 21
Hi,

it seems that you have SELinux running in enforcing mode and rejecting some processes to access another resources belong to different SELinux domain. Did you just move some files around?
 
Old 06-22-2013, 01:45 AM   #3
nijinashok00
LQ Newbie
 
Registered: Sep 2012
Posts: 28

Rep: Reputation: Disabled
I think you have changed the selinux contexts of your files to httpd_user_content_t. Restore the context into default using

restorecon -R /
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Starting services at bootup on Linux chucker8 Linux - General 1 05-05-2006 10:53 AM
bootup sequence services problem meDream Linux - Newbie 2 05-18-2005 06:25 AM
starting smb services failed... batfastad Linux - Newbie 24 01-29-2005 06:28 PM
Starting services at bootup Lucasite Linux - Newbie 5 04-17-2004 02:08 PM
help starting xscreensaver at bootup rose_bud4201 Linux - Software 2 01-10-2003 06:25 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 01:21 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration