Re: [gentoo-hardened] SELinux problem -> avc: denied {execmem}

[kakou]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Jan Meier wrote:
> Hello,
>
> I am running SELinux and at boot time I get the following avc: denied
> messages:
>
> May 21 16:01:40 jeeves audit(1148220069.887:0): avc:  denied  { execmem
} for 
> pid=1 comm=init scontext=system_u:system_r:kernel_t
> tcontext=system_u:system_r:kernel_t tclass=process
> May 21 16:01:40 jeeves audit(1148220069.905:0): avc:  denied  { execmem
} for 
> pid=1 comm=init scontext=system_u:system_r:init_t
> tcontext=system_u:system_r:init_t tclass=process
> May 21 16:01:40 jeeves audit(1148220070.475:0): avc:  denied  { execmem
} for 
> pid=896 comm=rc scontext=system_u:system_r:initrc_t
> tcontext=system_u:system_r:initrc_t tclass=process
> May 21 16:01:40 jeeves audit(1148220070.920:0): avc:  denied  { execmem
} for 
> pid=904 comm=mount scontext=system_u:system_r:mount_t
> tcontext=system_u:system_r:mount_t tclass=process
> May 21 16:01:40 jeeves audit(1148220071.457:0): avc:  denied  { execmem
} for 
> pid=934 comm=swapon scontext=system_u:system_r:fsadm_t
> tcontext=system_u:system_r:fsadm_t tclass=process
> May 21 16:01:40 jeeves audit(1148220072.480:0): avc:  denied  { execmem
} for 
> pid=974 comm=modules-update scontext=system_u:system_r:update_modules_t
> tcontext=system_u:system_r:update_modules_t tclass=process
>
> What can I do to get rid of them?
> When I execute `setenforce 1` I get a "Killed" after each command I
execute,
> does this have something to do with the denied messages?
>
> Best regards,
>
> Jan
>
>
>
You boot in enforcing or permissive mode?
You are using an other security protection (grsecurity, PAX, ...) ?
You are in stable or ~x86?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEcHIw3RS+hG/PB/URApMKAJ9DD8zAhSyJQ0NHwQStWvzsnhZ+4wCfXv1k
jvWILLlRUskWkUmtk9w0haw=
=w7UJ
-----END PGP SIGNATURE-----

-- 
gentoo-hardened@g.o mailing list