On 1/23/06, Justin Conover <justin.conover@gmail.com> wrote:


On 1/23/06, Justin Conover < justin.conover@gmail.com> wrote:


On 1/23/06, Daniel J Walsh < dwalsh@redhat.com> wrote:
Justin Conover wrote:
>
>
> On 1/23/06, *Daniel J Walsh* <dwalsh@redhat.com
> <mailto: dwalsh@redhat.com>> wrote:
>
>     Roger Grosswiler wrote:
>     > this is after todays update:
>     >
>     >
>     > allow hald_t automount_tmp_t:dir getattr;
>     > allow hald_t boot_t:dir getattr;
>     > allow hald_t home_root_t:dir search;
>     > allow hald_t initctl_t:fifo_file write;
>     > allow hald_t initrc_var_run_t:file lock;
>     > allow hald_t mnt_t:dir read;
>     > allow hald_t mnt_t:file write;
>     > allow hald_t sysctl_fs_t:dir search;
>     > allow hald_t usr_t:file execute;
>     > allow hald_t var_lib_nfs_t:dir search;
>     >
>     >
>     > ...and again if selinux==enforced then no g-p-m
>     >
>     > Rog
>     >
>     >
>     What version of policy are you running?
>
>     Latest version is supposed to allow hald to have full control over
>     mnt.
>     The usr_t:file execute sounds like a mislabled file which should have
>     been fixed by the latest policy also.
>
>
>     --
>     fedora-test-list mailing list
>     fedora-test-list@redhat.com <mailto:fedora-test-list@redhat.com>
>     To unsubscribe:
>     https://www.redhat.com/mailman/listinfo/fedora-test-list
>
>
>
> rpm -qa *\policy\*
> selinux-policy-targeted-2.2.2-1
> selinux-policy-2.2.2-1
> policycoreutils-1.29.9-2
>
> Same problem.
Please attach the audit.log that caused these messages.

--
fedora-test-list mailing list
fedora-test-list@redhat.com
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-test-list


 justin@kainos:~$ gnome-power-manager

** (gnome-power-manager:23679): WARNING **: main: An SELinux policy prevents this sender from sending this message to this recipient (rejected message had interface " org.freedesktop.DBus" member "Hello" error name "(unset)" destination "org.freedesktop.DBus")

** ERROR **: This program cannot start until you start the dbussystem daemon
This is usually started in initscripts, and is usually called messagebus
It is STRONGLY recommended you reboot your compterafter restarting messagebus


aborting...

(gnome_segv:23680): Gtk-WARNING **: Theme directory 16x16/status16x16/stock/chart of theme gnome has no size field



(gdb) bt
#0  0x007eab89 in g_logv () from /usr/lib/libglib-2.0.so.0
#1  0x007eae47 in g_log () from /usr/lib/libglib-2.0.so.0
#2  0x0804eb8a in ?? ()
#3  0x006696b4 in __libc_start_main () from /lib/libc.so.6
#4  0x0804c0d1 in ?? ()



[root@kainos ~]# gnome-power-manager

** (gnome-power-manager:2894): WARNING **: main: Unable to determine the address of the message bus

** ERROR **: This program cannot start until you start the dbus session daemon
This is usually started in X or gnome startup (depending on distro)
You can launch the session dbus-daemon manually with this command:
eval `dbus-launch --auto-syntax`

aborting...

(gnome_segv:2897): Gtk-WARNING **: Theme directory 16x16/status16x16/stock/chart of theme gnome has no size field

[root@kainos ~]# /etc/init.d/haldaemon status
hald (pid 2480) is running...


[root@kainos audit]# grep pid=2480 audit.log
type=USER_AVC msg=audit(1138046588.888:70): user pid=2449 uid=81 auid=4294967295 msg='avc:  denied  { acquire_svc } for service= org.freedesktop.Hal spid=2480 scontext=system_u:system_r:hald_t tcontext=system_u:system_r:initrc_t tclass=dbus : exe="?" (sauid=81, hostname=?, addr=?, terminal=?)'