[gentoo-hardened] Denied message

[sebastien Pastor]

Hi guys,

I am finishing a brand new Selinux install. I have still 3 avc denied
message types when i boot up on enforcing mode. I hope anyone could help
me in understanding why they are showing up ... i m quite a newbie so
please be kind with me ;-).

- the first denied concerns init running on system_u:system_r:init_t
context , trying to do a getcap on a process class object with context
system_u:system_r:init_t

- the second denieds concerns processes run from  modules-update script
(id,mv,cp ..) scontext=system_u:system_r:update_modules_t trying to
search directories like  /var /usr etc .... : i had a look @ modutil.te
and there is a bunch of dontaudit  which seems to take care of this. Why
do i see those denied then  ? is it a well-known bug ?

- the last denieds are issued by unix_chkpwd
scontext=system_u:system_r:system_chkpwd_t
tcontext=root:object_r:sysadm_tty_device_t  tclass=chr_file

Thanks in advance

Regards

Sebastien.





-- 
gentoo-hardened@g.o mailing list