On Tue, Jun 15, 2010 at 09:38:47AM +0100, Frank Murphy wrote:
from logwatch
--------------------- Kernel Begin ------------------------
WARNING: Kernel Errors Present type=1400 audit(1276553951.414:525): avc: denied { read append } for pid=2526 comm="polkit-agent-he" path="/home/user/.xsession-errors" dev=dm-7 ino=2 ...: 1 Time(s)
That is not enough information. You may be able to retrieve the complete avc denial with the following command:
ausearch -m avc -ts yesterday | grep polkit | grep xsession
The AVC denials have information that is required to determine what happend.
---------------------- Kernel End -------------------------
selinux-policy-3.7.19-28.fc13.noarch (from koji) kernel-PAE-2.6.33.5-128.fc13.i686 (from Koji)
-- Regards,
Frank Murphy UTF_8 Encoded Friend of Fedora -- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux