--- On Wed, 2/4/09, Dominick Grift domg472@gmail.com wrote:
From: Dominick Grift domg472@gmail.com Subject: Re: on machine with CPU -> 100%, lots of avc's To: olivares14031@yahoo.com Cc: fedora-selinux-list@redhat.com, fedora-test-list@redhat.com Date: Wednesday, February 4, 2009, 9:33 AM Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800], schreef Antonio Olivares:
setroubleshooter does not kick in and I find these via
dmesg.
Thanks for help/advice provided.
Do you not have auditd enabled? Usually the avc denials are in /var/log/audit/audit.log
The avc denials are (most likely) due to missing policy. You can pipe them into the input stream of audit2why to confirm this.
--
I wonder what is wrong auditd is not running :(, it is enabled via services, but it is not working:
[olivares@localhost ~]$ su - Password: [root@localhost ~]# chkconfig auditd --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off [root@localhost ~]# service auditd status auditd is stopped [root@localhost ~]#
Thanks,
Antonio