Description of problem: Since the last update of selinux-poliy-targeted (now running selinux-policy-targeted-3.6.12-50) cpufreq_selector generates AVC's when setting the frequency to anything other than the default ondemand. The processor is an Intel dualcore Version-Release number of selected component (if applicable): 3.6.12-50 How reproducible: Select any speed other than ondemand from the cpu speeds available Steps to Reproduce: 1. 2. 3. Actual results: type=AVC msg=audit(1245765229.102:93): avc: denied { read } for pid=5238 comm="cpufreq-selecto" name="mls" dev=selinuxfs ino=12 scontext=system_u:system_r:cpufreqselector_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file type=AVC msg=audit(1245765229.102:93): avc: denied { open } for pid=5238 comm="cpufreq-selecto" name="mls" dev=selinuxfs ino=12 scontext=system_u:system_r:cpufreqselector_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file Expected results: no AVC's Additional info: Why is it saying something about mls, when I'm running targeted?
You can add these rules now using # grep avc /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Fixed in selinux-policy-3.6.12-57.fc11
Works for me. Closing this bug.