On 04/10/2021 08:56, Adi Pircalabu wrote:
ausearch -m AVC,USER_AVC
[...]
----
time->Sat Oct 2 13:35:30 2021
type=PROCTITLE msg=audit(1633145730.776:6604): proctitle="(systemd)"
type=SOCKADDR msg=audit(1633145730.776:6604): saddr=100000000000000000000000
type=SYSCALL msg=audit(1633145730.776:6604): arch=c000003e syscall=46 success=yes exit=16
a0=b a1=7ffc4f481b70 a2=0 a3=558ad876d380 items=0 ppid=1 pid=224888 auid=42 uid=0 gid=0
euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="(systemd)"
exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)
type=AVC msg=audit(1633145730.776:6604): avc: denied { audit_control } for pid=224888
comm="(systemd)" capability=30 scontext=system_u:system_r:init_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=capability permissive=0
----
time->Mon Oct 4 08:45:43 2021
type=AVC msg=audit(1633297543.851:260): avc: denied { audit_control } for pid=1733
comm="(systemd)" capability=30 scontext=system_u:system_r:init_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=capability permissive=0
----
time->Mon Oct 4 08:46:13 2021
type=AVC msg=audit(1633297573.837:340): avc: denied { audit_control } for pid=2267
comm="(systemd)" capability=30 scontext=system_u:system_r:init_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=capability permissive=0
----
time->Mon Oct 4 09:10:41 2021
type=AVC msg=audit(1633299041.788:248): avc: denied { audit_control } for pid=1739
comm="(systemd)" capability=30 scontext=system_u:system_r:init_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=capability permissive=0
----
time->Mon Oct 4 09:11:32 2021
type=AVC msg=audit(1633299092.256:339): avc: denied { audit_control } for pid=2302
comm="(systemd)" capability=30 scontext=system_u:system_r:init_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=capability permissive=0
If you run "sealert -b" what does it have for "troubleshooting"?
I'm running KDE/F34 and not seeing any issues.
--
Nothing to see here