| Main Archive Page > Month Archives > selinux archives |
Re: refpolicy HEAD, Debian, syslogd & setrlimit
From: Christopher J. PeBenito <cpebenito_at_nospam>Date: Thu Dec 06 2007 - 14:28:35 GMT
To: Václav Ovsík <vaclav.ovsik@i.cz>
On Wed, 2007-12-05 at 15:13 +0100, Václav Ovsík wrote:
> audit(1196861341.205:26): avc: denied { setrlimit } for pid=2160 comm="cron" scontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=process
>
> There is a content of /etc/pam.d/cron from my Debian Etch:
[...]
> # Sets up user limits, please define limits for cron tasks
> # through /etc/security/limits.conf
> session required pam_limits.so
>
> /etc/security/limits.conf
>
> has only comment sections.
>
> Can be rlimit allowed or should be solved this in some other way?
I added this in distro_debian for now, so if someone does put limits, it will work. -- Chris PeBenito Tresys Technology, LLC (410) 290-1411 x150 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.