Bug 493945 - SELinux is preventing setroubleshootd
Summary: SELinux is preventing setroubleshootd
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-04-03 12:10 UTC by Marcela Mašláňová
Modified: 2009-04-03 13:58 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-04-03 13:58:04 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
messages selinux enforcing (220.22 KB, application/octet-stream)
2009-04-03 12:10 UTC, Marcela Mašláňová
no flags Details
messages selinux permissive (4.12 KB, application/octet-stream)
2009-04-03 12:12 UTC, Marcela Mašláňová
no flags Details
audit (29.45 KB, application/octet-stream)
2009-04-03 12:13 UTC, Marcela Mašláňová
no flags Details

Description Marcela Mašláňová 2009-04-03 12:10:39 UTC
Created attachment 338027 [details]
messages selinux enforcing

Description of problem:
A lot of selinux messages in /var/log/messages

Version-Release number of selected component (if applicable):
selinux-policy-3.6.10-5.fc11.noarch
selinux-policy-targeted-3.6.10-5.fc11.noarch

How reproducible:
It looks like problem python2.6 and setroubleshooter.
  
Actual results:
Setroubleshooter can't run even in permissive mode. The whole system is after update and relabel. 

Expected results:
Working setroubleshooter without warnings. 

Additional info:
All logs attached.

Comment 1 Marcela Mašláňová 2009-04-03 12:12:25 UTC
Created attachment 338028 [details]
messages selinux permissive

Comment 2 Marcela Mašláňová 2009-04-03 12:13:30 UTC
Created attachment 338029 [details]
audit

Comment 3 Daniel Walsh 2009-04-03 13:58:04 UTC
The AVC messages about setroubleshoot are caused by a bug in the nss package, which should be fixed in todays rawhide.

The crashing of setroubleshoot is fixed by the update of todays libselinux.

setroubleshoot going nuts starting and stopping should be fixed by an update to its setroubleshoot package in tomorrows rawhide.

 nss                             x86_64 3.12.2.99.3-5.fc11      rawhide   1.0 M
 libselinux                      i586   2.0.79-5.fc11           rawhide   105 k

setroubleshoot-2.1.7-1.fc11


Note You need to log in before you can comment on or make changes to this bug.