On 05/21/2009 09:42 AM, Mike Fleetwood wrote:
Daniel J Walsh wrote:
Are you seeing any avc's in /var/log/audit/audit.log?
With SELinux in permissive mode ...
[root@mfleetwo3 ~]# id
uid=0(root) gid=0(root)
groups=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel)
context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh
[root@mfleetwo3 ~]# service messagebus status
dbus-daemon (pid 2736 2055) is running...
I get the following in /var/log/audit/audit.log:
type=SELINUX_ERR msg=audit(1242912572.287:30134):
security_compute_sid: invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=system_u:object_r:initrc_exec_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.287:30134): arch=40000003 syscall=11
success=yes exit=0 a0=bf981981 a1=bf980194 a2=8fca858 a3=4 items=0
ppid=4082 pid=4087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="messagebus" exe="/bin/bash"
subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)
type=SELINUX_ERR msg=audit(1242912572.294:30135):
security_compute_sid: invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:initrc_t:s0
tcontext=system_u:object_r:consoletype_exec_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.294:30135): arch=40000003 syscall=11
success=yes exit=0 a0=8ec9e78 a1=8ec44b8 a2=8ec9c08 a3=0 items=0
ppid=4088 pid=4089 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="consoletype"
exe="/sbin/consoletype" subj=unconfined_u:unconfined_r:initrc_t:s0
key=(null)
type=SELINUX_ERR msg=audit(1242912572.310:30136):
security_compute_sid: invalid context
unconfined_u:unconfined_r:initrc_t:s0 for
scontext=unconfined_u:unconfined_r:initrc_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=process
type=SYSCALL msg=audit(1242912572.310:30136): arch=40000003 syscall=11
success=yes exit=0 a0=8ec8e80 a1=8ec48f8 a2=8ec8fd0 a3=0 items=0
ppid=4090 pid=4091 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=2 comm="pidof" exe="/sbin/killall5"
subj=unconfined_u:unconfined_r:initrc_t:s0 key=(null)
I assume that there is a single SELinux related root cause which is
preventing D-Bus starting ConsoleKit and preventing /sbin/service
reporting status of daemon when SELinux is in enforcing mode.
P.S. Sorry in advance if I don't replay for a week I am away on
holiday from Friday for a week with unknown Internet connectivity.
Thanks,
Mike
Your message bus is running as initrc_t which indicates that you have a
labeling problem.
fixfiles restore
Reboot and you should be all set.
Your message bus should be running as system_dbusd_t. It is also
running as unconfined_u:unconfined_r which indicates you have stopped
and started it.
If you run restorecon -R -v /bin I would figure you will see some
mislabeled files.
--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
