Daniel J Walsh wrote: > Are you seeing any avc's in /var/log/audit/audit.log? With SELinux in permissive mode ... [root@mfleetwo3 ~]# id uid=0(root) gid=0(root) groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh [root@mfleetwo3 ~]# service messagebus status dbus-daemon (pid 2736 2055) is running... I get the following in /var/log/audit/audit.log: type=SELINUX_ERR msg=audit(1242912572.287:30134): security_compute_sid: invalid context unconfined_u:unconfined_r:initrc_t:s0 for scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:initrc_exec_t:s0 tclass=process type=SYSCALL msg=audit(1242912572.287:30134): arch=40000003 syscall=11 success=yes exit=0 a0=bf981981 a1=bf980194 a2=8fca858 a3=4 items=0 ppid=4082 pid=4087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="messagebus" exe="/bin/bash" subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null) type=SELINUX_ERR msg=audit(1242912572.294:30135): security_compute_sid: invalid context unconfined_u:unconfined_r:initrc_t:s0 for scontext=unconfined_u:unconfined_r:initrc_t:s0 tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=process type=SYSCALL msg=audit(1242912572.294:30135): arch=40000003 syscall=11 success=yes exit=0 a0=8ec9e78 a1=8ec44b8 a2=8ec9c08 a3=0 items=0 ppid=4088 pid=4089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="consoletype" exe="/sbin/consoletype" subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null) type=SELINUX_ERR msg=audit(1242912572.310:30136): security_compute_sid: invalid context unconfined_u:unconfined_r:initrc_t:s0 for scontext=unconfined_u:unconfined_r:initrc_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=process type=SYSCALL msg=audit(1242912572.310:30136): arch=40000003 syscall=11 success=yes exit=0 a0=8ec8e80 a1=8ec48f8 a2=8ec8fd0 a3=0 items=0 ppid=4090 pid=4091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=2 comm="pidof" exe="/sbin/killall5" subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null) I assume that there is a single SELinux related root cause which is preventing D-Bus starting ConsoleKit and preventing /sbin/service reporting status of daemon when SELinux is in enforcing mode. P.S. Sorry in advance if I don't replay for a week I am away on holiday from Friday for a week with unknown Internet connectivity. Thanks, Mike -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
