Gentoo Archives: gentoo-hardened

From: "François Valenduc" <francois.valenduc@××××××××××.be>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] hwclock and selinux
Date: Sun, 20 Apr 2008 08:27:35
Message-Id: 480AFE5B.3070602@tvcablenet.be
1 Hello everybody,
2 I have installed selinux on my computer and there is a problem with
3 hwclock. It is denied by selinux and as a result, time keeps set to UTC
4 instead of CEST (since I am living in Belgium) I get this message in dmesg:
5
6 type=1400 audit(1208682664.167:223): avc: denied { read write } for
7 pid=29607 comm="hwclock" path="/var/log/faillog" dev=dm-6 ino=271083
8 scontext=root:system_r:hwclock_t tcontext=system_u:object_r:faillog_t
9 tclass=file
10
11 I also got this error:
12 type=1400 audit(1208679707.497:84): avc: denied { read } for
13 pid=18454 comm="hwclock" path="/dev/urandom" dev=tmpfs ino=2059
14 scontext=root:system_r:hwclock_t
15 tcontext=system_u:object_r:urandom_device_t tclass=chr_file
16
17 However, I think I solved it by issuing the commands "setsebool -P
18 global_ssp 1" and "load_policy"
19
20 Does anybody have any idea about this problem ? I have already
21 relabelled filesystems two times and I also re-emerged util-linux, but
22 it doesn't work yet.
23
24 Thanks for your help,
25 François Valenduc
26 --
27 gentoo-hardened@l.g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] hwclock and selinux xake@×××××××××.net