Gentoo Logo
Gentoo Spaceship

Installation:
Gentoo Handbook
Installation Docs

Documentation:
Home
Listing
About Gentoo
Philosophy
Social Contract

Resources:
Bug Tracker
Developer List
Discussion Forums
Gentoo BitTorrents
Gentoo Linux Enhancement Proposals
IRC Channels
Mailing Lists
Mirrors
Name and Logo Guidelines
Online Package Database
Security Announcements
Staffing Needs
Supporting Vendors
View our CVS

Graphics:
Logos and themes
Icons
ScreenShots

Miscellaneous Resources:
Gentoo Linux Store
Gentoo-hosted projects
IBM dW/Intel article archive




List Archive: gentoo-hardened
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-hardened@g.o
From: "guo walter" <walter.d.guo.newsgroup@...>
Subject: Re: lots of avcs when running dmesg, is this nomal ?
Date: Mon, 10 Sep 2007 21:49:41 +0800
Hi,<br><br>Any idea?<br><br><div><span class="gmail_quote">Thanks/Walter<br><br>On 9/8/07, <b class="gmail_sendername">guo walter</b> &lt;<a href="mailto:walter.d.guo.newsgroup@...">walter.d.guo.newsgroup@...</a>
&gt; wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi, guys, I got lots of avc lines (more than 700 lines) when running dmesg, How to deal with it?
<br><br><br>#dmesg<br>......<br>SELinux: initialized (dev pipefs, type pipefs), uses task SIDs<br>SELinux: initialized (dev sockfs, type sockfs), uses task SIDs
<br>SELinux: initialized (dev cpuset, type cpuset), not configured for labeling<br>SELinux: initialized (dev proc, type proc), uses genfs_contexts<br>SELinux: initialized (dev bdev, type bdev), uses genfs_contexts<br>SELinux: initialized (dev rootfs, type rootfs), uses genfs_contexts
<br>SELinux: initialized (dev sysfs, type sysfs), uses genfs_contexts<br>audit(1188994315.739:2): policy loaded auid=4294967295<br>audit(1188994315.739:3):
avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=1 comm=&quot;init&quot; name=&quot;console&quot;
dev=sda5 ino=13470 scontext=system_u:system_r<div>:init_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>audit(1188994315.739:4): avc:&nbsp; denied&nbsp; { ioctl } for&nbsp; pid=1
comm=&quot;init&quot; name=&quot;tty0&quot; dev=sda5 ino=13339 scontext=system_u:system_r:init_t tcontext=system_u:object_r:file_t tclass=chr_file<br>audit(1188994316.239
:5): avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=523 comm=&quot;rc&quot; name=&quot;console&quot; dev=sda5 ino=13470 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:file_t tclass=chr_file<br>audit(1188994316.739


:6):
avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=525 comm=&quot;consoletype&quot;
name=&quot;console&quot; dev=sda5 ino=13470 scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>audit(1188994316.739:7): avc:&nbsp; denied&nbsp; { search }
foraudit(1188994316.739:8): avc:&nbsp; denied&nbsp; { getattr } for&nbsp; pid=525
comm=&quot;consoletype&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>audit(1188994316.739:9): avc:&nbsp; denied&nbsp; { ioctl } for&nbsp; pid=525
comm=&quot;consoletype&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>audit(1188994316.739:10): avc:&nbsp; denied&nbsp; { ioctl } for&nbsp; pid=528
comm=&quot;stty&quot; name=&quot;console&quot; dev=sda5 ino=13470 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:file_t tclass=chr_file<br>
audit(1188994317.239:11): avc:&nbsp; denied&nbsp; { getattr } for&nbsp; pid=523
comm=&quot;bash&quot; name=&quot;null&quot; dev=sda5 ino=13139 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:file_t tclass=chr_file<br>audit(
1188994317.239:12): avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=532
comm=&quot;dmesg&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:dmesg_t tcontext=system_u:object_r:file_t tclass=chr_file<br>audit(
1188994317.239:13): avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=535
comm=&quot;mount&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:mount_t tcontext=system_u:object_r:file_t tclass=chr_file<br>audit(
1188994317.239:14): avc:&nbsp; denied&nbsp; { read write } for&nbsp; pid=580
comm=&quot;restorecon&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:restorecon_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>&nbsp; pid=525 comm=&quot;consoletype&quot; name=&quot;dev&quot; dev=sda5 ino=12288 scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=dir<br>audit(1188994316.739:8):
avc:&nbsp; denied&nbsp; { getattr } for&nbsp; pid=525 comm=&quot;consoletype&quot;
name=&quot;console&quot; dev=sda5 ino=13470 scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>audit(1188994316.739:9): avc:&nbsp; denied&nbsp; { ioctl } for&nbsp; pid=525
comm=&quot;consoletype&quot; name=&quot;console&quot; dev=sda5 ino=13470
scontext=system_u:system_r:consoletype_t tcontext=system_u:object_r:file_t tclass=chr_file
<br>......<br><br>Thanks,<br><span>Walter.</span></div>
</blockquote></div><br>
Replies:
Re: Re: lots of avcs when running dmesg, is this nomal ?
-- Antoine Martin
References:
lots of avcs when running dmesg, is this nomal ?
-- guo walter
Navigation:
Lists: gentoo-hardened: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
lots of avcs when running dmesg, is this nomal ?
Next by thread:
Re: Re: lots of avcs when running dmesg, is this nomal ?
Previous by date:
paxctl and apache-2.2.6 strangeness
Next by date:
Re: Re: lots of avcs when running dmesg, is this nomal ?


Updated Jun 17, 2009

Donate to support our development efforts.

Gentoo Centric Hosting: vr.org

VR Hosted

Tek Alchemy

Tek Alchemy

SevenL.net

SevenL.net

php|architect

php|architect

Copyright 2001-2007 Gentoo Foundation, Inc. Questions, Comments? Email www@gentoo.org.