Bug 493945

Summary: SELinux is preventing setroubleshootd
Product: [Fedora] Fedora Reporter: Marcela Mašláňová <mmaslano>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: rawhideCC: dwalsh, jkubin, mgrepl
Target Milestone: ---Keywords: SELinux
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-04-03 13:58:04 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
messages selinux enforcing
none
messages selinux permissive
none
audit none

Description Marcela Mašláňová 2009-04-03 12:10:39 UTC
Created attachment 338027 [details]
messages selinux enforcing

Description of problem:
A lot of selinux messages in /var/log/messages

Version-Release number of selected component (if applicable):
selinux-policy-3.6.10-5.fc11.noarch
selinux-policy-targeted-3.6.10-5.fc11.noarch

How reproducible:
It looks like problem python2.6 and setroubleshooter.
  
Actual results:
Setroubleshooter can't run even in permissive mode. The whole system is after update and relabel. 

Expected results:
Working setroubleshooter without warnings. 

Additional info:
All logs attached.

Comment 1 Marcela Mašláňová 2009-04-03 12:12:25 UTC
Created attachment 338028 [details]
messages selinux permissive

Comment 2 Marcela Mašláňová 2009-04-03 12:13:30 UTC
Created attachment 338029 [details]
audit

Comment 3 Daniel Walsh 2009-04-03 13:58:04 UTC
The AVC messages about setroubleshoot are caused by a bug in the nss package, which should be fixed in todays rawhide.

The crashing of setroubleshoot is fixed by the update of todays libselinux.

setroubleshoot going nuts starting and stopping should be fixed by an update to its setroubleshoot package in tomorrows rawhide.

 nss                             x86_64 3.12.2.99.3-5.fc11      rawhide   1.0 M
 libselinux                      i586   2.0.79-5.fc11           rawhide   105 k

setroubleshoot-2.1.7-1.fc11