Dear selinux experts and fellow testers,
on the machine with CPU hogging, the following avc's are present:
type=1400 audit(1233758357.144:4): avc: denied { create } for pid=2580 comm="kde4-config" name=".kde" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:root_t:s0 tclass=dir fuse init (API version 7.11) SELinux: initialized (dev fuse, type fuse), uses genfs_contexts type=1400 audit(1233758390.012:5): avc: denied { write } for pid=2893 comm="devkit-power-da" name="timer_stats" dev=proc ino=4026531963 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758390.013:6): avc: denied { open } for pid=2893 comm="devkit-power-da" name="timer_stats" dev=proc ino=4026531963 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758390.013:7): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/timer_stats" dev=proc ino=4026531963 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758392.002:8): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758392.004:9): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2511" dev=proc ino=10480 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=dir type=1400 audit(1233758392.004:10): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=10502 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758392.005:11): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=10502 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758392.005:12): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2511/cmdline" dev=proc ino=10502 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758392.005:13): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2620" dev=proc ino=11289 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 tclass=dir __ratelimit: 129 callbacks suppressed type=1400 audit(1233758396.000:57): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758396.000:58): avc: denied { open } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758396.000:59): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233758396.010:60): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2921" dev=proc ino=14735 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233758396.010:61): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=14736 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758396.010:62): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=14736 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758396.011:63): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2921/cmdline" dev=proc ino=14736 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758398.004:64): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2653" dev=proc ino=11813 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233758398.005:65): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=14993 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758398.005:66): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=14993 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file __ratelimit: 27 callbacks suppressed type=1400 audit(1233758402.005:76): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2280" dev=proc ino=8832 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233758402.005:77): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9580 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758402.005:78): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9580 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233758402.005:79): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2280/cmdline" dev=proc ino=9580 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file kjournald starting. Commit interval 5 seconds EXT3-fs warning: maximal mount count reached, running e2fsck is recommended EXT3 FS on sda6, internal journal EXT3-fs: mounted filesystem with ordered data mode. SELinux: initialized (dev sda6, type ext3), uses xattr type=1400 audit(1233758404.004:80): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2423" dev=proc ino=9745 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=dir type=1400 audit(1233758404.004:81): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=15758 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758404.004:82): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=15758 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758404.004:83): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2423/cmdline" dev=proc ino=15758 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:hald_t:s0 tclass=file type=1400 audit(1233758448.005:84): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2348" dev=proc ino=9659 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=dir type=1400 audit(1233758448.005:85): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9685 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file type=1400 audit(1233758448.005:86): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9685 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file type=1400 audit(1233758448.005:87): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2348/cmdline" dev=proc ino=9685 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:avahi_t:s0 tclass=file type=1400 audit(1233758464.004:88): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2140" dev=proc ino=16016 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=dir type=1400 audit(1233758464.004:89): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16017 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file type=1400 audit(1233758464.004:90): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16017 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file type=1400 audit(1233758464.004:91): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2140/cmdline" dev=proc ino=16017 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:automount_t:s0 tclass=file type=1400 audit(1233758698.005:92): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3008" dev=proc ino=16691 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233758706.005:93): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2545" dev=proc ino=16472 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=dir type=1400 audit(1233758706.005:94): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16764 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233758706.005:95): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16764 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233758706.005:96): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2545/cmdline" dev=proc ino=16764 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233758950.004:97): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2312" dev=proc ino=9576 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=dir type=1400 audit(1233758950.005:98): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9583 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file type=1400 audit(1233758950.005:99): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9583 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file type=1400 audit(1233758950.005:100): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2312/cmdline" dev=proc ino=9583 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xfs_t:s0 tclass=file type=1400 audit(1233759040.010:101): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3027" dev=proc ino=16799 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233759040.010:102): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16872 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233759040.010:103): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16872 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233759040.010:104): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3027/cmdline" dev=proc ino=16872 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:wine_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233759042.005:105): avc: denied { search } for pid=2893 comm="devkit-power-da" name="1975" dev=proc ino=16970 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir type=1400 audit(1233759042.005:106): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16971 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759042.005:107): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=16971 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759042.005:108): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/1975/cmdline" dev=proc ino=16971 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759080.002:109): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233759080.002:110): avc: denied { open } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233759080.002:111): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233759082.005:112): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3033" dev=proc ino=17816 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir type=1400 audit(1233759082.005:113): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=17817 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759082.005:114): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=17817 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759082.005:115): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3033/cmdline" dev=proc ino=17817 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:syslogd_t:s0 tclass=file type=1400 audit(1233759084.005:116): avc: denied { search } for pid=2893 comm="devkit-power-da" name="705" dev=proc ino=2040 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=1400 audit(1233759084.005:117): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=2136 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file type=1400 audit(1233759084.006:118): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=2136 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file __ratelimit: 3 callbacks suppressed type=1400 audit(1233760156.006:120): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2536" dev=proc ino=16471 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=dir type=1400 audit(1233760156.006:121): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=18948 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file type=1400 audit(1233760156.007:122): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=18948 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file type=1400 audit(1233760156.011:123): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2536/cmdline" dev=proc ino=18948 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:fsdaemon_t:s0 tclass=file type=1400 audit(1233760404.007:124): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3148" dev=proc ino=19176 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233760404.007:125): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19177 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760404.007:126): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19177 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760404.007:127): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3148/cmdline" dev=proc ino=19177 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760410.008:128): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19714 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760410.008:129): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19714 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760410.008:130): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3149/cmdline" dev=proc ino=19714 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233760414.008:131): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3169" dev=proc ino=19766 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 tclass=dir npviewer.bin[3204] general protection ip:1361c2c sp:bf837860 error:0 in libflashplayer.so[ff5000+952000] type=1400 audit(1233760540.001:132): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233760540.001:133): avc: denied { open } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233760540.001:134): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file npviewer.bin[3492] general protection ip:1166c2c sp:bfbdcc00 error:0 in libflashplayer.so[dfa000+952000] npviewer.bin[3605] general protection ip:12d5c2c sp:bfa72a90 error:0 in libflashplayer.so[f69000+952000] npviewer.bin[3740]: segfault at 2d ip 01764086 sp bfae7530 error 4 in libflashplayer.so[110b000+952000] npviewer.bin[3822]: segfault at 13 ip 0216b177 sp bffd3194 error 4 in libflashplayer.so[1ac5000+952000] npviewer.bin[3848]: segfault at 13 ip 0160f177 sp bfa06bd4 error 4 in libflashplayer.so[f69000+952000] npviewer.bin[3875] general protection ip:60acc2c sp:bfff9020 error:0 in libflashplayer.so[5d40000+952000] type=1400 audit(1233761948.018:135): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2268" dev=proc ino=8803 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=dir type=1400 audit(1233761948.019:136): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=8809 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file type=1400 audit(1233761948.019:137): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=8809 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file type=1400 audit(1233761948.019:138): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2268/cmdline" dev=proc ino=8809 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sendmail_t:s0 tclass=file type=1400 audit(1233761950.017:139): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2332" dev=proc ino=16469 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233761950.017:140): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19913 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233761950.017:141): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=19913 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233761950.018:142): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2332/cmdline" dev=proc ino=19913 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233761958.016:143): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2543" dev=proc ino=10645 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=dir type=1400 audit(1233761958.016:144): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=10646 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761958.016:145): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=10646 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761958.017:146): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2543/cmdline" dev=proc ino=10646 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761990.017:147): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3936" dev=proc ino=38966 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=dir type=1400 audit(1233761990.018:148): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=38967 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761990.018:149): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=38967 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761990.019:150): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3936/cmdline" dev=proc ino=38967 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0 tclass=file type=1400 audit(1233761994.081:151): avc: denied { search } for pid=2893 comm="devkit-power-da" name="305" dev=proc ino=2034 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=dir type=1400 audit(1233761994.081:152): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=2112 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file type=1400 audit(1233761994.081:153): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=2112 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file type=1400 audit(1233761994.081:154): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/305/cmdline" dev=proc ino=2112 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kernel_t:s0 tclass=file type=1400 audit(1233762106.025:155): avc: denied { search } for pid=2893 comm="devkit-power-da" name="3984" dev=proc ino=40607 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233762106.025:156): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40612 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233762106.025:157): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40612 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233762106.025:158): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/3984/cmdline" dev=proc ino=40612 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233762250.018:159): avc: denied { search } for pid=2893 comm="devkit-power-da" name="2322" dev=proc ino=9577 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_cronjob_t:s0 tclass=dir type=1400 audit(1233762250.019:160): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9586 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_cronjob_t:s0 tclass=file type=1400 audit(1233762250.019:161): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=9586 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_cronjob_t:s0 tclass=file type=1400 audit(1233762250.020:162): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/2322/cmdline" dev=proc ino=9586 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_cronjob_t:s0 tclass=file type=1400 audit(1233762258.019:163): avc: denied { search } for pid=2893 comm="devkit-power-da" name="4009" dev=proc ino=40911 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:logwatch_t:s0 tclass=dir type=1400 audit(1233762258.020:164): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40919 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:logwatch_t:s0 tclass=file type=1400 audit(1233762258.020:165): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40919 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:logwatch_t:s0 tclass=file type=1400 audit(1233762258.020:166): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/4009/cmdline" dev=proc ino=40919 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:logwatch_t:s0 tclass=file type=1400 audit(1233762298.001:167): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233762298.001:168): avc: denied { open } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233762298.001:169): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233762298.020:170): avc: denied { search } for pid=2893 comm="devkit-power-da" name="4013" dev=proc ino=40938 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=dir type=1400 audit(1233762298.020:171): avc: denied { read } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40949 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233762298.020:172): avc: denied { open } for pid=2893 comm="devkit-power-da" name="cmdline" dev=proc ino=40949 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233762298.022:173): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/4013/cmdline" dev=proc ino=40949 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:system_r:rpm_t:s0-s0:c0.c1023 tclass=file type=1400 audit(1233763262.000:174): avc: denied { read } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233763262.000:175): avc: denied { open } for pid=2893 comm="devkit-power-da" name="interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=1400 audit(1233763262.000:176): avc: denied { getattr } for pid=2893 comm="devkit-power-da" path="/proc/interrupts" dev=proc ino=4026531984 scontext=system_u:system_r:devicekit_power_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file [olivares@localhost ~]$
setroubleshooter does not kick in and I find these via dmesg. Thanks for help/advice provided.
Regards,
Antonio
Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800], schreef Antonio Olivares:
setroubleshooter does not kick in and I find these via dmesg. Thanks for help/advice provided.
Do you not have auditd enabled? Usually the avc denials are in /var/log/audit/audit.log
The avc denials are (most likely) due to missing policy. You can pipe them into the input stream of audit2why to confirm this.
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
--- On Wed, 2/4/09, Dominick Grift domg472@gmail.com wrote:
From: Dominick Grift domg472@gmail.com Subject: Re: on machine with CPU -> 100%, lots of avc's To: olivares14031@yahoo.com Cc: fedora-selinux-list@redhat.com, fedora-test-list@redhat.com Date: Wednesday, February 4, 2009, 9:33 AM Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800], schreef Antonio Olivares:
setroubleshooter does not kick in and I find these via
dmesg.
Thanks for help/advice provided.
Do you not have auditd enabled? Usually the avc denials are in /var/log/audit/audit.log
The avc denials are (most likely) due to missing policy. You can pipe them into the input stream of audit2why to confirm this.
--
I wonder what is wrong auditd is not running :(, it is enabled via services, but it is not working:
[olivares@localhost ~]$ su - Password: [root@localhost ~]# chkconfig auditd --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off [root@localhost ~]# service auditd status auditd is stopped [root@localhost ~]#
Thanks,
Antonio
On Wed, Feb 4, 2009 at 10:46 AM, Antonio Olivares olivares14031@yahoo.com wrote:
--- On Wed, 2/4/09, Dominick Grift domg472@gmail.com wrote:
From: Dominick Grift domg472@gmail.com Subject: Re: on machine with CPU -> 100%, lots of avc's To: olivares14031@yahoo.com Cc: fedora-selinux-list@redhat.com, fedora-test-list@redhat.com Date: Wednesday, February 4, 2009, 9:33 AM Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800], schreef Antonio Olivares:
setroubleshooter does not kick in and I find these via
dmesg.
Thanks for help/advice provided.
Do you not have auditd enabled? Usually the avc denials are in /var/log/audit/audit.log
The avc denials are (most likely) due to missing policy. You can pipe them into the input stream of audit2why to confirm this.
--
I wonder what is wrong auditd is not running :(, it is enabled via services, but it is not working:
[olivares@localhost ~]$ su - Password: [root@localhost ~]# chkconfig auditd --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off [root@localhost ~]# service auditd status auditd is stopped [root@localhost ~]#
Thanks,
Antonio
Running "audit2allow -al" on a system booted with "enforcing=0" yields:
[root@tlondon ~]# audit2allow -al
#============= devicekit_power_t ============== allow devicekit_power_t NetworkManager_t:dir search; allow devicekit_power_t NetworkManager_t:file { read getattr open }; allow devicekit_power_t audisp_t:dir search; allow devicekit_power_t audisp_t:file { read getattr open }; allow devicekit_power_t auditd_t:dir search; allow devicekit_power_t auditd_t:file { read getattr open }; allow devicekit_power_t avahi_t:dir search; allow devicekit_power_t avahi_t:file { read getattr open }; allow devicekit_power_t crond_t:dir search; allow devicekit_power_t crond_t:file { read getattr open }; allow devicekit_power_t cupsd_t:dir search; allow devicekit_power_t cupsd_t:file { read getattr open }; allow devicekit_power_t dhcpc_t:dir search; allow devicekit_power_t dhcpc_t:file { read getattr open }; allow devicekit_power_t hald_t:dir search; allow devicekit_power_t hald_t:file { read getattr open }; allow devicekit_power_t kernel_t:dir search; allow devicekit_power_t kernel_t:file { read getattr open }; allow devicekit_power_t kerneloops_t:dir search; allow devicekit_power_t kerneloops_t:file { read getattr open }; allow devicekit_power_t nscd_t:dir search; allow devicekit_power_t nscd_t:file { read getattr open }; allow devicekit_power_t ntpd_t:dir search; allow devicekit_power_t ntpd_t:file { read getattr open }; allow devicekit_power_t proc_t:file { write read getattr open }; allow devicekit_power_t rpcbind_t:dir search; allow devicekit_power_t rpcbind_t:file { read getattr open }; allow devicekit_power_t rpm_t:dir search; allow devicekit_power_t rpm_t:file { read getattr open }; allow devicekit_power_t sendmail_t:dir search; allow devicekit_power_t sendmail_t:file { read getattr open }; allow devicekit_power_t unconfined_dbusd_t:dir search; allow devicekit_power_t unconfined_dbusd_t:file { read getattr open }; allow devicekit_power_t xdm_t:dir search; allow devicekit_power_t xdm_t:file { read getattr open }; allow devicekit_power_t xserver_t:dir search; allow devicekit_power_t xserver_t:file { read getattr open };
#============= devicekit_t ============== allow devicekit_t udev_tbl_t:file { read getattr open }; [root@tlondon ~]#
tom
[BTW, SELinux/permissive mode appears to have no impact on the Xorg issue. Still at >90%....]
On 02/04/2009 08:46 PM, Antonio Olivares wrote:
--- On Wed, 2/4/09, Dominick Grift domg472@gmail.com wrote:
From: Dominick Grift domg472@gmail.com Subject: Re: on machine with CPU -> 100%, lots of avc's To: olivares14031@yahoo.com Cc: fedora-selinux-list@redhat.com, fedora-test-list@redhat.com Date: Wednesday, February 4, 2009, 9:33 AM Op woensdag 04-02-2009 om 08:39 uur [tijdzone -0800], schreef Antonio Olivares:
setroubleshooter does not kick in and I find these via
dmesg.
Thanks for help/advice provided.
Do you not have auditd enabled? Usually the avc denials are in /var/log/audit/audit.log
The avc denials are (most likely) due to missing policy. You can pipe them into the input stream of audit2why to confirm this.
--
I wonder what is wrong auditd is not running :(, it is enabled via services, but it is not working:
Make sure it has enough space on disk.It will commit suicide if the disk is near full.
[olivares@localhost ~]$ su - Password: [root@localhost ~]# chkconfig auditd --list auditd 0:off 1:off 2:on 3:on 4:on 5:on 6:off [root@localhost ~]# service auditd status auditd is stopped [root@localhost ~]#
I wonder what is wrong auditd is not running :(, it is
enabled via services, but it is not working:
Make sure it has enough space on disk.It will commit suicide if the disk is near full.
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Space is there :), might be something else
[olivares@localhost ~]$ df -l Filesystem 1K-blocks Used Available Use% Mounted on /dev/mapper/VolGroup00-LogVol00 133536968 68089452 58554768 54% / /dev/sda3 101105 39048 56836 41% /boot tmpfs 376108 644 375464 1% /dev/shm /dev/sda6 13931104 5621892 7601552 43% /media/disk [olivares@localhost ~]$
Regards,
Antonio
selinux@lists.fedoraproject.org
-
Antonio Olivares -
Dominick Grift -
Manuel Wolfshant -
Tom London