Bug 196474 - xend fails to start : x86_64, avc denied errors
Summary: xend fails to start : x86_64, avc denied errors
Keywords:
Status: CLOSED DUPLICATE of bug 192813
Alias: None
Product: Fedora
Classification: Fedora
Component: xen
Version: 6
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: James Antill
QA Contact: Brian Brock
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-06-23 16:18 UTC by Mark McLoughlin
Modified: 2007-11-30 22:11 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-07-14 16:57:55 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Mark McLoughlin 2006-06-23 16:18:31 UTC
With FC6 test1, on x86_64, with selinux enabled, xend fails to start at boot.

Seeing these selinux errors repeated every time xend start/status runs:

---
avc:  denied  { read write } for  pid=2668 comm="xend" name="0" dev=devpts ino=2
scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:initrc_devpts_t:s0 tclass=chr_file
avc:  denied  { read write } for  pid=2668 comm="xend" name="0" dev=devpts ino=2
scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:initrc_devpts_t:s0 tclass=chr_file
avc:  denied  { read write } for  pid=2668 comm="xend" name="0" dev=devpts ino=2
scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:initrc_devpts_t:s0 tclass=chr_file
avc:  denied  { append } for  pid=2668 comm="python" name="xend.log" dev=dm-0
ino=27690085 scontext=system_u:system_r:xend_t:s0
tcontext=root:object_r:var_log_t:s0 tclass=file
avc:  denied  { search } for  pid=2668 comm="python" name="tmp" dev=dm-0
ino=26705921 scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:tmp_t:s0 tclass=dir
avc:  denied  { search } for  pid=2668 comm="python" name="tmp" dev=dm-0
ino=27688964 scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:tmp_t:s0 tclass=dir
avc:  denied  { read } for  pid=2668 comm="python" name="tmp" dev=dm-0
ino=7635012 scontext=system_u:system_r:xend_t:s0
tcontext=system_u:object_r:usr_t:s0 tclass=lnk_file
avc:  denied  { write } for  pid=2668 comm="python" name="/" dev=dm-0 ino=2
scontext=system_u:system_r:xend_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir
---

When trying to debug it by starting it manually (either with service xend start,
/etc/rc.d/init.d/xend start or /usr/sbin/xend start) it eventually works after a
while ... not sure what actually causes it to start working, though.

Comment 1 James Antill 2006-07-14 16:57:55 UTC
 Note that currently I can't get xen+SELinux to work on x86-64 anyway due to
BZ#194292

*** This bug has been marked as a duplicate of 192813 ***


Note You need to log in before you can comment on or make changes to this bug.