Bug 475224
Summary: | grepping socket produces "kernel: SELinux: WARNING: inside open_file_to_av with unknown mode:140XXX" messages | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Tom London <selinux> |
Component: | kernel | Assignee: | Eric Paris <eparis> |
Status: | CLOSED UPSTREAM | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | dwalsh, jmorris, kernel-maint, quintela, sdsmall |
Target Milestone: | --- | Keywords: | Reopened |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-03-06 13:30:48 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Tom London
2008-12-08 15:32:11 UTC
this message should be completely harmless (outside of performance/serial spam/overhead/blah/blah/blah. Do you have avc denials? davej checked in the fix already: * Fri Dec 05 2008 Dave Jones <davej> - SELinux: check open perms in dentry_open not inode_permission so it should be fixed on any F11 2.6.28-rc7-git5 or later kernel.... ugggh, you have the patch, I might see what's going on, but still, those messages are "harmless".... S_IFSOCK == 0140000 for anyone who is playing along at home /me did not realize it was possible to "open" a socket in this manor. Yeah, harmless. Just spew. No AVCs..... commit 8b6a5a37f87a414ef8636e36ec75accb27bb7508 upstream I'm slack and still haven't fixed it.... [root@localhost ~]# grep hello /var/run/acpid.socket grep: /var/run/acpid.socket: No such device or address [root@localhost ~]# dmesg -c SELinux: WARNING: inside open_file_to_av with unknown mode:140666 I'll do it tomorrow, I don't remember why my patch wasn't accepted... patch sent to selinux list |