-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 07/31/2013 12:01 PM, Radha Venkatesh (radvenka) wrote:
Any input on the below question?
*From:*Radha Venkatesh (radvenka) *Sent:* Tuesday, July 30, 2013 4:12 PM *To:* fedora-selinux-list@redhat.com; selinux@lists.fedoraproject.org *Cc:* ipc-selinux-dev(mailer list); Prakash Mishra -X (prakasmi - INFOSYS TECHNOLOGIES LIMITED at Cisco) *Subject:* Unable to modify a file in enforcing mode, but no denials seen even after semodule -DB
We have a strange issue showing up in our system. We are trying to modify a configuration file - we are unable to in enforcing mode but are able to in permissive mode. There are no denials seen.
We have run semodule –DB, to get to the hidden denials, but to no avail.
Could you give us some pointers on how to get to the bottom of this?
Thanks,
Radha.
-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
The only time I have seen stuff like this is when you have an SELinux aware application that is not logging properly.
I would look for user_avc or selinux_err
ausearch -m avc,user_avc,selinux_err
Also is there any clue in any of the logging information?