Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 299578 Details for
Bug 439599
System Monitor - SElinux - Nice value
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
SELinux log and more
nice.systemmonitor.txt (text/plain), 3.24 KB, created by
Flóki Pálsson
on 2008-03-29 14:26:07 UTC
(
hide
)
Description:
SELinux log and more
Filename:
MIME Type:
Creator:
Flóki Pálsson
Created:
2008-03-29 14:26:07 UTC
Size:
3.24 KB
patch
obsolete
>System Monitor 2.22.0 >gnome-system-monitor-2.22.0-1.fc9.x86_64 > >============= >in windeow aftertraying to caange nice value in system monitor > >'Cannot change the priority of process with pid 2447 to -3: Permission denied' > >==================== >In terminla change nice value > >[root@localhost ~]# renice -5 2447 >2447: old priority 0, new priority -5 >[root@localhost ~]# > >[root@localhost ~]# restorecon -R -v '/home/floki' >restorecon reset /home/floki/.lyrics context unconfined_u:object_r:user_home_dir_t:s0->system_u:object_r:user_home_t:s0 >restorecon reset /home/floki/.lyrics/áá£á± context unconfined_u:object_r:user_home_dir_t:s0->system_u:object_r:user_home_t:s0 >You have new mail in /var/spool/mail/root >[root@localhost ~]# gedit /var/spool/mail/root > >=============================================================== >Log form SElinx after change in Nice value > >SELinux is preventing the semodule from using potentially mislabeled files (/home/floki/.xsession-errors). Detailed Description[SELinux is in permissive mode, the operation would have been denied but was permitted due to permissive mode.]SELinux has denied semodule access to potentially mislabeled file(s) (/home/floki/.xsession-errors). This means that SELinux will not allow semodule to use these files. It is common for users to edit files in their home directory or tmp directories and then move (mv) them to system directories. The problem is that the files end up with the wrong file context which confined applications are not allowed to access. Allowing AccessIf you want semodule to access this files, you need to relabel them using restorecon -v '/home/floki/.xsession-errors'. You might want to relabel the entire directory using restorecon -R -v '/home/floki'. Additional InformationSource Context:  unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023Target Context:  system_u:object_r:user_home_t:s0Target Objects:  /home/floki/.xsession-errors [ file ]Source:  semoduleSource Path:  /usr/sbin/semodulePort:  <Unknown>Host:  localhost.localdomainSource RPM Packages:  policycoreutils-2.0.46-2.fc9Target RPM Packages:  Policy RPM:  selinux-policy-3.3.1-24.fc9Selinux Enabled:  TruePolicy Type:  targetedMLS Enabled:  TrueEnforcing Mode:  PermissivePlugin Name:  home_tmp_bad_labelsHost Name:  localhost.localdomainPlatform:  Linux localhost.localdomain 2.6.25-0.163.rc7.git1.fc9.x86_64 #1 SMP Thu Mar 27 09:29:41 EDT 2008 x86_64 x86_64Alert Count:  6First Seen:  fös 28.mar 2008, 20:43:00 GMTLast Seen:  lau 29.mar 2008, 13:59:53 GMTLocal ID:  e4111568-ed4b-4873-999a-d643229799aaLine Numbers:  Raw Audit Messages :host=localhost.localdomain type=AVC msg=audit(1206799193.281:55): avc: denied { append } for pid=8593 comm="semodule" path="/home/floki/.xsession-errors" dev=dm-0 ino=7045135 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=file host=localhost.localdomain type=SYSCALL msg=audit(1206799193.281:55): arch=c000003e syscall=59 success=yes exit=0 a0=1247490 a1=1247830 a2=1246660 a3=3c01d6da10 items=0 ppid=8590 pid=8593 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="semodule" exe="/usr/sbin/semodule" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null) >
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Raw
Actions:
View
Attachments on
bug 439599
: 299578