Gentoo Archives: gentoo-hardened

From: Will Keaney <keaneyw@×××××.com>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] Excessive SELinux avc denials
Date: Sun, 18 Nov 2007 21:48:21
Message-Id: 20071118164441.5eaef8ab@UberPinguin.keaneynet
1 I've just finished updating my SELinux VM, but still get a lot of avc
2 denials in /var/log/syslog.
3 What is the recommended method of changing
4 the SELinux policy? I seem to remember PeBenito saying in IRC that
5 editing the policy files directly is not recommended.
6
7 On the off chance that someone has some insight into what might be
8 causing these errors, I'm attaching the output of
9 grep "Nov 18 16:2" /var/log/syslog | cut -d " " -f 7- | grep avc
10
11
12 Thanks,
13
14 Will Keaney
15 uberpinguin

Attachments

File name MIME type
avc.txt text/plain
signature.asc application/pgp-signature

Replies

Subject Author
Re: [gentoo-hardened] Excessive SELinux avc denials Bill Sharer <bsharer@××××××××××.com>
[gentoo-hardened] SELinux preventing sshd from listening on ports other than 22 Andrew Ross <aross@g.o>