On Sun, 2007-11-11 at 22:42 +0300, Markelov Andrey wrote:
Hello!
My system:
Fedora 8, selinux-policy-3.0.8-44 in targeted mode.
I log in to the system as ordinary user and then do su -.
When I try to start sshd daemon in Fedora 8 by typing "service sshd start"
I receive "Permission denied" message and this entry in audit.log:
type=SELINUX_ERR msg=audit(1194792116.506:236): security_compute_sid: invalid context
unconfined_u:system_r:sshd_t:s0-s0:c0.c1023 for scontext=unconfined_u:system_r:initrc_t:s0
tcontext=system_u:object_r:sshd_exec_t:s0 tclass=process
type=SYSCALL msg=audit(1194792116.506:236): arch=40000003 syscall=11 success=yes exit=0
a0=8f58ab0 a1=8f58658 a2=8f451c0 a3=0 items=0 ppid=11059 pid=11068 auid=500 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 comm="sshd"
exe="/usr/sbin/sshd" subj=unconfined_u:system_r:sshd_t:s0-s0:c0.c1023
key=(null)
When I try to start sshd my id -Z is:
unconfined_u:system_r:unconfined_t
I have some questions:
1) How can I explain that SELINUX_ERR message and "subj=..." in SYSCALL
message?
2) Is it normal situation? In RHEL5 the "su -; service sshd start" commands
work fine.
3) How can I enable "service sshd start" in that situation?
You just need
to upgrade to selinux-policy-3.0.8-53.fc8.
--
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
Turkish proverb