Daniel B. Thurman wrote:
It seems, that these are appearing whenever I am downloading files from an F9/10 NTFS samba shared file to a remote machine. Is there anything I can do?
==================================================================== Count Description ==================================================================== 636 SELinux is preventing pidof (hotplug_t) "sys_nice" hotplug_t. ================= Raw Audit Messages node=gold.cdkkt.com type=AVC msg=audit(1235083401.426:52788): avc: denied { sys_nice } for pid=30760 comm="pidof" capability=23 scontext=system_u:system_r:hotplug_t:s0 tcontext=system_u:system_r:hotplug_t:s0 tclass=capability
node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.426:52788): arch=40000003 syscall=3 success=yes exit=203 a0=4 a1=b800e000 a2=400 a3=8177628 items=0 ppid=30725 pid=30760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pidof" exe="/sbin/killall5" subj=system_u:system_r:hotplug_t:s0 key=(null)
==================================================================== Count Description ==================================================================== 636 SELinux is preventing pidof (hotplug_t) "sys_ptrace" hotplug_t. ================= Raw Audit Messages node=gold.cdkkt.com type=AVC msg=audit(1235083401.426:52789): avc: denied { sys_ptrace } for pid=30760 comm="pidof" capability=19 scontext=system_u:system_r:hotplug_t:s0 tcontext=system_u:system_r:hotplug_t:s0 tclass=capability
node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.426:52789): arch=40000003 syscall=85 success=no exit=-13 a0=bfc0dcb8 a1=81777b8 a2=1000 a3=bfc0dbbe items=0 ppid=30725 pid=30760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pidof" exe="/sbin/killall5" subj=system_u:system_r:hotplug_t:s0 key=(null)
==================================================================== Count Description ==================================================================== 212 SELinux is preventing ifdown-ipv6 (hotplug_t) "read" to net (proc_net_t). ================= Raw Audit Messages node=gold.cdkkt.com type=AVC msg=audit(1235083401.406:52783): avc: denied { read } for pid=30748 comm="ifdown-ipv6" name="net" dev=proc ino=4026531869 scontext=system_u:system_r:hotplug_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=lnk_file
node=gold.cdkkt.com type=SYSCALL msg=audit(1235083401.406:52783): arch=40000003 syscall=195 success=no exit=-13 a0=865d3b0 a1=bfa834d0 a2=67fff4 a3=865d3b0 items=0 ppid=30725 pid=30748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ifdown-ipv6" exe="/bin/bash" subj=system_u:system_r:hotplug_t:s0 key=(null)
Thanks, Dan
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Never mind. I found out that netplugd was activated and was interferring. I turned this off and the problem went away.
Dan