SELinux message
by A.J. Bonnema
Hi all,
This morning I got several of the following message:
Raw Audit Messages
avc: denied { search } for comm="procmail" dev=sdb6 egid=0 euid=0
exe="/usr/bin/procmail" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="root"
pid=4585 scontext=system_u:system_r:procmail_t:s0 sgid=0
subj=system_u:system_r:procmail_t:s0 suid=0 tclass=dir
tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0
It looks like procmail is trying to do *something*. I would just like to
find out what it is that procmail is trying to do. So I could see
whether it is legitemate.
I do assume procmail knows what it is doing, but before I relable the
system (as indicated in the explanation) I would just like to know:
shouldn't the SELinux be fitted to procmail in some way?
Is there a way I can get this accomplished i.e. can I report this to
procmail as a bug?
Guus Bonnema -- happily running FC7 since this morning --
P.S. I include the complete message, maybe it helps.
============ Explanatory message ======================
Summary
SELinux is preventing access to files with the default label,
default_t.
Detailed Description
SELinux permission checks on files labeled default_t are being denied.
These files/directories have the default label on them. This can
indicate a
labeling problem, especially if the files being referred to are
not top
level directories. Any files/directories under standard system
directories,
/usr, /var. /dev, /tmp, ..., should not be labeled with the default
label.
The default label is for files/directories which do not have a
label on a
parent directory. So if you create a new directory in / you might
legitimately get this label.
Allowing Access
If you want a confined domain to use these files you will probably
need to
relabel the file/directory with chcon. In some cases it is just
easier to
relabel the system, to relabel execute: "touch /.autorelabel; reboot"
Additional Information
Source Context system_u:system_r:procmail_t
Target Context system_u:object_r:default_t
Target Objects root [ dir ]
Affected RPM Packages procmail-3.22-19.fc7
[application]filesystem-2.4.6-1.fc7 [target]
Policy RPM selinux-policy-2.6.4-8.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.default
Host Name athene.abonnema.xs4all.nl
Platform Linux athene.abonnema.xs4all.nl
2.6.21-1.3194.fc7
#1 SMP Wed May 23 22:47:07 EDT 2007
x86_64 x86_64
Alert Count 2
First Seen Fri 01 Jun 2007 02:22:25 PM CEST
Last Seen Fri 01 Jun 2007 02:54:17 PM CEST
Local ID 789f2a56-fe70-440b-83a6-d85bc17715ae
Line Numbers
Raw Audit Messages
avc: denied { search } for comm="procmail" dev=sdb6 egid=0 euid=0
exe="/usr/bin/procmail" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="root"
pid=4585 scontext=system_u:system_r:procmail_t:s0 sgid=0
subj=system_u:system_r:procmail_t:s0 suid=0 tclass=dir
tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0
--
A.J. Bonnema, Leiden The Netherlands,
user #328198 (Linux Counter http://counter.li.org)
16 years, 11 months
Weird disk problem
by A.J. Bonnema
Hi all,
I have been running FC for a long time now.
While switching from FC6 to FC7 I came across the following weird problem.
I have two 250G disks on SATA. Using QTParted I discovered the second
disk has a lot of free space (like 120G).
But QTParted refuses to do anything other than show its properties.
I can not use it to allocate a new partition, be it primary or extended.
All commands are greyed out.
So I thought, hey, I have still got fdisk.
But fdisk doesn't recofnize the space at all.
Neither as a partition, nor as free space.
Okee, so I started installing F7. As long as I leave that particular
piece of "free space" alone all is well.
But, if I want to define a new partition (primary, extended or logical)
the install utility anaconda crashes! And forces a reboot. And I have
no idea how to save the debug output it serves.
Who has any idea what I can look for?
I was thinking along the following lines:
1. Is it a hardware problem? How can I determin that? Or rather
eliminate that?
2. If it is not hardware, what could it be?
===== start fdisk output ==============
[root@athene]~# fdisk /dev/sdb
The number of cylinders for this disk is set to 30401.
There is nothing wrong with that, but this is larger than 1024,
and could in certain setups cause problems with:
1) software that runs at boot time (e.g., old versions of LILO)
2) booting and partitioning software from other OSs
(e.g., DOS FDISK, OS/2 FDISK)
Command (m for help): p
Disk /dev/sdb: 250.0 GB, 250059350016 bytes
255 heads, 63 sectors/track, 30401 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot Start End Blocks Id System
/dev/sdb1 * 1 131 1052226 83 Linux
/dev/sdb2 132 11227 89128620 5 Extended
/dev/sdb3 11228 11358 1052257+ 83 Linux
/dev/sdb4 11359 14622 26218080 83 Linux
/dev/sdb5 132 7964 62918541 83 Linux
/dev/sdb6 7965 11227 26210016 83 Linux
Command (m for help): n
No free sectors available
Command (m for help):
====== end fdisk output ===============
Guus.
--
A.J. Bonnema, Leiden The Netherlands,
user #328198 (Linux Counter http://counter.li.org)
16 years, 11 months
Intel Sound Problem
by Thomas Paine
I'm having a problem with the sound on my laptop. It has the intel
82801 ICH7 soundcard in it, and it doesn't seem to want to work
properly.
During install it detected and played fine, but now that I've got
logged in after a reboot it refuses to work.
I had this problem with FC6, and it seems to have carried over to F7.
One thing to note, my system seems to detect two sound devices.
The snd-hda-intel as well as usb sound. U0x46d:0x8c6.
Any ideas I can try to get it working?
Thanks.
--
-=/>Thom
16 years, 11 months
way OT: Time extraction
by Jamie Bohr
Sorry the below is so off topic, I posted it to a PHP/MySQL forum and have
not gotten a response and was hoping some one here could point me to a
resource. The manager that is asking for this says M$ Excel can do what he
is asking, I have my doubts that is can.
----
I have a request to produce a report for server availability for business
hours only, M-F 8AM-5PM. I have an example table below that houses all the
data but am having trouble understanding how to extract the data.
The table looks something like:
id startDate startTime endDate endTime
1 2007-03-01 06:00:00 2007-05-01 17:00:00
2 2007-04-16 09:30:00 2007-04-16 13:00:00
3 2007-05-23 00:00:00 2007-05-26 19:00:00
....
id represents a system
system 1 was down for a total of 198 hours between 3/01 - 3/31. 22 workdays
* 9 hours a day
system 2 was down for a total of 3.5 hours
system 3 was down for 24 hours
I can do it by hand, how do I do it using SQL/PHP? What if I wanted a report
that showed downtime for April? system one would have a down time figure of
189 hours + systems 2 downtime of 3.5 hours. (567 workhours - 189 hours down
for system 1 - 3.5 hours for system 2) / 567 * 100 = % system were
available.
Please tell me there is an easy way to calculate the hours of downtime? And
in that vain the number of working hours in a given month.
--
Jamie Bohr
16 years, 11 months
F7 torrent advice please
by Gene Heskett
Greetings;
When I awoke this morning I expected to see FG7 ready to burn, but whatever
filtering vz is doing was quite successfull and had managed to stop azureas
in its tracks with about half a gig to go.
So I shut it down and loaded up ktorrent. I set it up with the same 2 files
as I am also sharing the kubuntu-6.06-x86-dvd.iso because its used as the
basis for emc2, the cnc machine control program.
ktorrent has managed to get things going again, but when I added the Kubuntu
iso for upload, it appears to be hogging the upload bandwidth, which in turn
has slowed the download average to about 60kbyte a second.
So, in Ktorrent, can the upload bandwidth be throttled on the individual file
somehow, so that there is enough bandwidth to properly handle the downloading
of the other file, or do I have to disable that share until the other is
finished?
I've not succeeded in finding such an option in its menus as yet.
--
Cheers, Gene
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Mathematics deals exclusively with the relations of concepts
to each other without consideration of their relation to experience.
-- Albert Einstein
16 years, 11 months
Where is Fedora 7 "Everything" spin?
by Marko Vojinovic
What happened to Fedora Everything spin? I can't seem to find any CD or
DVD iso's of it. Is there a link that I missed?
How am I to install F7 on a machine with no network?
Best regards, :-)
Marko
Marko Vojinovic
Institute of Physics
University of Belgrade
======================
e-mail: vmarko(a)phy.bg.ac.yu
16 years, 11 months
How To (Respin)
by Browder, Tom
Given the problems with my four attempted F 7 installations so far
(three systems: only one successful [on the second attempt]), and
assuming fixes and new rpms, I probably will want to do my own respin of
an installation DVD which is supposed to be one of the highlights of F
7.
Question: Where is the documentation for that?
Thanks.
-Tom
16 years, 11 months
Release of FC 7 - tommorow.
by sizo nsibande
I have to say, I am anciouse to start my download of this new release
tommorow. I certainly hope the guys at Fedora don't suddenly decide to
move the schedule up to some other time. I guess we will all have to
wait and see then.
--
Communication is not just english grammaer and literature, but a well
established database between people that have come to know each other!
16 years, 11 months
Re: F7: is it an OS? is it a function key? it is both!
by David G. Miller (aka DaveAtFraud)
"A.J. Bonnema" <abonnema(a)xs4all.nl> wrote:
> I just can't wait for the first bug report that reads something like:
>
> "Please can someone help me?
> "When in F9 pressing F7, I really get F8 like F7.
>
> :-))
>
> Guus.
That's easy. I just call it "FC^h7". That seems to be what I type most
of the time.
Cheers,
Dave
--
Politics, n. Strife of interests masquerading as a contest of principles.
-- Ambrose Bierce
16 years, 11 months