Gentoo Archives: gentoo-hardened

From: Jan Meier <jan@×××××××××.org>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] SELinux problem -> avc: denied {execmem}
Date: Sun, 21 May 2006 13:45:54
Message-Id: 200605211541.00448.jan@codejunky.org
1 Hello,
2
3 I am running SELinux and at boot time I get the following avc: denied
4 messages:
5
6 May 21 16:01:40 jeeves audit(1148220069.887:0): avc: denied { execmem } for
7 pid=1 comm=init scontext=system_u:system_r:kernel_t
8 tcontext=system_u:system_r:kernel_t tclass=process
9 May 21 16:01:40 jeeves audit(1148220069.905:0): avc: denied { execmem } for
10 pid=1 comm=init scontext=system_u:system_r:init_t
11 tcontext=system_u:system_r:init_t tclass=process
12 May 21 16:01:40 jeeves audit(1148220070.475:0): avc: denied { execmem } for
13 pid=896 comm=rc scontext=system_u:system_r:initrc_t
14 tcontext=system_u:system_r:initrc_t tclass=process
15 May 21 16:01:40 jeeves audit(1148220070.920:0): avc: denied { execmem } for
16 pid=904 comm=mount scontext=system_u:system_r:mount_t
17 tcontext=system_u:system_r:mount_t tclass=process
18 May 21 16:01:40 jeeves audit(1148220071.457:0): avc: denied { execmem } for
19 pid=934 comm=swapon scontext=system_u:system_r:fsadm_t
20 tcontext=system_u:system_r:fsadm_t tclass=process
21 May 21 16:01:40 jeeves audit(1148220072.480:0): avc: denied { execmem } for
22 pid=974 comm=modules-update scontext=system_u:system_r:update_modules_t
23 tcontext=system_u:system_r:update_modules_t tclass=process
24
25 What can I do to get rid of them?
26 When I execute `setenforce 1` I get a "Killed" after each command I execute,
27 does this have something to do with the denied messages?
28
29 Best regards,
30
31 Jan
32
33
34
35 --
36 GPG-Key-ID: BC3D36E0

Replies