I still have setroubleshoot shutdown, now I see this:
# grep setroubleshoot /var/log/audit/audit.log
type=AVC msg=audit(1203765473.955:41): avc: denied { read } for
pid=2047 comm="setroubleshootd" name="depcomp" dev=sda12 ino=367
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:fusefs_t:s0 tclass=lnk_file
type=SYSCALL msg=audit(1203765473.955:41): arch=40000003 syscall=229
success=yes exit=27 a0=9fdd974 a1=ae3723 a2=a02a8b0 a3=ff items=0
ppid=1 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd"
exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0
key=(null)
type=AVC msg=audit(1203765473.975:42): avc: denied { getattr } for
pid=2047 comm="setroubleshootd"
path=2F766964656F2F305F72656D6F76652064726D2F467265654D65322F646570636F6D70
dev=sda12 ino=367 scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=system_u:object_r:fusefs_t:s0 tclass=lnk_file
type=SYSCALL msg=audit(1203765473.975:42): arch=40000003 syscall=196
success=yes exit=0 a0=9f950d0 a1=b7a3e748 a2=d33ff4 a3=9f97430 items=0
ppid=1 pid=2047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd"
exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0
key=(null)
Any ideas?
Valent.
--
http://kernelreloaded.blog385.com/
linux, blog, anime, spirituality, windsurf, wireless
registered as user #367004 with the Linux Counter, http://counter.li.org.
ICQ: 2125241, Skype: valent.turkovic
