Bug 131189 - avc denied read exe=/sbin/minilogd path=/init dev=rootfs
Summary: avc denied read exe=/sbin/minilogd path=/init dev=rootfs
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 3
Hardware: i386
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: FC3SELinux FC3BugWeekQA
TreeView+ depends on / blocked
 
Reported: 2004-08-28 17:35 UTC by John Reiser
Modified: 2007-11-30 22:10 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2004-09-28 04:22:02 UTC


Attachments (Terms of Use)

Description John Reiser 2004-08-28 17:35:10 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.2)
Gecko/20040809

Description of problem:
kernel: audit(1093714310.771:0): avc:  denied  { read } for  pid=537
exe=/sbin/minilogd path=/init dev=rootfs ino=15
scontext=user_u:system_r:syslogd_t tcontext=system_u:object_r:root_t
tclass=file


Version-Release number of selected component (if applicable):
selinux-policy-targeted-1.17.5-2

How reproducible:
Always

Steps to Reproduce:
1. Boot with targeted policy, permissive mode.
2.
3.
    

Actual Results:  kernel: audit(1093714310.771:0): avc:  denied  { read
} for  pid=537 exe=/sbin/minilogd path=/init dev=rootfs ino=15
scontext=user_u:system_r:syslogd_t tcontext=system_u:object_r:root_t
tclass=file
The immediately-preceding messages in /var/log/messages are:
kernel: SELinux: initialized (dev rootfs, type rootfs), uses
genfs_contexts
kernel: SELinux: initialized (dev sysfs, type sysfs), uses genfs_contexts


Expected Results:  No complaint.

Additional info:

Comment 1 Daniel Walsh 2004-08-30 19:29:38 UTC
Fixed in  selinux-policy-targeted-1.17.6-1


Comment 2 Jef Spaleta 2004-09-28 04:22:02 UTC
confirmed no minilogd warning messages with current rawhide version
selinux-policy-targeted-1.17.20-2. Closing resolution rawhide

-jef


Note You need to log in before you can comment on or make changes to this bug.