Bug 736511 - selinux is preventing sysstat's sa1 script from running
Summary: selinux is preventing sysstat's sa1 script from running
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-09-07 21:22 UTC by Orion Poplawski
Modified: 2011-09-08 11:35 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-09-08 11:35:58 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Orion Poplawski 2011-09-07 21:22:43 UTC 
Description of problem:

Seeing the following:

Sep  7 15:20:03 vmrawhide kernel: [  116.190339] type=1400 audit(1315430403.735:5): avc:  denied  { read } for  pid=1412 comm="sa1" path="/bin/bash" dev=vda2 ino=1067593 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file

The cron job fails with:

/bin/sh: error while loading shared libraries: cannot apply additional memory protection after relocation: Permission denied

Version-Release number of selected component (if applicable):
selinux-policy-3.10.0-25.fc17.noarch
sysstat-10.0.1-1.fc16.x86_64
Comment 1 Miroslav Grepl 2011-09-08 11:35:58 UTC 
Fixed in selinux-policy-3.10.0-26.fc17
Note You need to log in before you can comment on or make changes to this bug.