xdm_server_t wants urandom_device_t

From: Tom London <selinux_at_nospam>
Date: Fri Aug 17 2007 - 18:41:46 GMT
To: fedora-selinux <fedora-selinux-list@redhat.com>

Latest Rawhide, targeted/enforcing.

Get this early (right after cups 'label change' start up messages):

type=AVC msg=audit(1187373560.608:18): avc: denied { read } for pid=3111 comm="sh" name="urandom" dev=tmpfs ino=2350 scontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tcontext=system_u:object_r:urandom_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1187373560.608:18): arch=40000003 syscall=5 success=no exit=-13 a0=80d2bc0 a1=8000 a2=0 a3=8000 items=0 ppid=3075 pid=3111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty7 comm="sh" exe="/bin/bash" subj=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 key=(null)

--

Tom London

--

fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

This message: [ Message body ]
Next message: jihene tanneche: "SElinux beginner"
Previous message: Daniel J Walsh: "Re: ldconfig denials on F7"
Next in thread: Steve G: "Re: xdm_server_t wants urandom_device_t"
Reply: Steve G: "Re: xdm_server_t wants urandom_device_t"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]