yukku yukkoooooo said the following on 05/13/2006 05:13 AM:
> Paul Howarth wrote :
>> Look in /var/log/messages
>> and/or /var/log/audit/audit.log for "avc: denied" after you have run
>> the client in permissive mode (setenforce 0) and see what crops up.
>
> Yes I got such a message in /var/log/audit/audit.log after I disabled
> SELnx and ran vpnclient --
> type=AVC msg=audit(1147460693.437:11955217): avc: denied { execmod }
> for pid=4086 comm="vpnclient" name=libvpnapi.so dev=hda3 ino=32474
> scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t
> tclass=file
>
> So is there a way out of this ?
I am getting heaps of denies running FC5, I can't even browse a usb
drive with konqueror using this path - system:/media/hdc
Perhaps I will have to study SELinux to be able to write my own policy.
When I installed flash plugin I wouldn't work ant took a long while to
figure out that it was because of SELinux.
Regards,
Vini
