Bug 209949

Summary: many avc denied messages after setting strict
Product: [Fedora] Fedora Reporter: Gene Czarcinski <gczarcinski>
Component: selinux-policy-strictAssignee: Daniel Walsh <dwalsh>
Status: CLOSED CURRENTRELEASE QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhide   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Current Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-08-22 14:14:45 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
avc messages
none
/var/log/messages for bootup none

Description Gene Czarcinski 2006-10-08 18:20:41 UTC 
Description of problem:
After selecting permissive/strict, setting /.autorelabel and reboot.  Then
reboot again to get "clean" record.  Get 19 avc denied messages during
bootup/root login (see attachment).  Also attaching that portion of
/var/log/messages for the bootup.

Version-Release number of selected component (if applicable):
fc6-devel as of 10/8/2006, minimal server fresh install (no X)
Comment 1 Gene Czarcinski 2006-10-08 18:20:41 UTC 
Created attachment 138012 [details]
avc messages
Comment 2 Gene Czarcinski 2006-10-08 18:22:29 UTC 
Created attachment 138013 [details]
/var/log/messages for bootup
Comment 3 Gene Czarcinski 2006-10-08 18:47:52 UTC 
*** Bug 209946 has been marked as a duplicate of this bug. ***
Comment 4 Daniel Walsh 2007-01-11 22:13:31 UTC 
I did lots of work over vacation to help cleanup problems with strict policy. 
Although not perfect it works a lot better.

Fixed in selinux-policy-strict-2.4.6-24
Comment 5 Daniel Walsh 2007-08-22 14:14:45 UTC 
Should be fixed in the current release