Hi, I've just upgraded to F-18, and I've noticed the following messages in dmesg when running in permissive mode: [ 9.653558] type=1400 audit(1346591517.058:3): avc: denied { mmap_zero } for pid=381 comm="vbetool" scontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tclass=memprotect [ 9.654192] type=1400 audit(1346591517.059:4): avc: denied { secure_firmware } for pid=381 comm="vbetool" capability=37 scontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tclass=capability2 Some notes: 1) auditd is not yet running at this time as vbetool runs from a udev rule in the initrd (or so I believe) 2) Since I only had vbetool for historical reasons I've simply done "rpm -e vbetool" :)
[ 9.653558] type=1400 audit(1346591517.058:3): avc: denied { mmap_zero } for pid=381 comm="vbetool" scontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tclass=memprote can be allowed by mmap_low_allowed. I added a rule for secure_firmware
selinux-policy-3.11.1-16.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-16.fc18
Package selinux-policy-3.11.1-16.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-16.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-13554/selinux-policy-3.11.1-16.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-18.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/FEDORA-2012-13554/selinux-policy-3.11.1-18.fc18
Package selinux-policy-3.11.1-18.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-18.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-13554/selinux-policy-3.11.1-18.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-18.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.