After upgrading from FC4 to FC5, everything seems to be working well, except for the dbus-daemon. It hogs CPU and continuously spits out the following, unless messagebus is stopped:
audit(1143051102.334:1219773): avc: denied { name_connect } for pid=24150 comm="dbus-daemon" dest=111 scontext=user_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
audit(1143051102.334:1219773): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa7fbec a2=da4ff4 a3=0 items=0 pid=24150 auid=1567 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 comm="dbus-daemon" exe="/bin/dbus-daemon"
audit(1143051102.334:1219773): saddr=0200006F7F00000168C56709C0916700 audit(1143051102.334:1219773): nargs=3 a0=c a1=bfa7fcfc a2=10
I'm sure I missed something simple (as usual). Any hints?
If it helps, I'm using:
selinux-policy-2.2.23-15 selinux-policy-targeted-2.2.23-15
Thanks for any pointers, Tim
Tim Fenn wrote:
After upgrading from FC4 to FC5, everything seems to be working well, except for the dbus-daemon. It hogs CPU and continuously spits out the following, unless messagebus is stopped:
audit(1143051102.334:1219773): avc: denied { name_connect } for pid=24150 comm="dbus-daemon" dest=111 scontext=user_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
audit(1143051102.334:1219773): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa7fbec a2=da4ff4 a3=0 items=0 pid=24150 auid=1567 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 comm="dbus-daemon" exe="/bin/dbus-daemon"
audit(1143051102.334:1219773): saddr=0200006F7F00000168C56709C0916700 audit(1143051102.334:1219773): nargs=3 a0=c a1=bfa7fcfc a2=10
I'm sure I missed something simple (as usual). Any hints?
If it helps, I'm using:
selinux-policy-2.2.23-15 selinux-policy-targeted-2.2.23-15
Thanks for any pointers, Tim
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Are you running on an NIS machine? If yes is the allow_ypbind boolean turned on?
getsebool allow_ypbind
If not turn it on
setsebool -P allow_ypbind=1
Dan
On Wed, Mar 22, 2006 at 03:36:49PM -0500, Daniel J Walsh wrote:
Tim Fenn wrote:
After upgrading from FC4 to FC5, everything seems to be working well, except for the dbus-daemon. It hogs CPU and continuously spits out the following, unless messagebus is stopped:
audit(1143051102.334:1219773): avc: denied { name_connect } for pid=24150 comm="dbus-daemon" dest=111 scontext=user_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:portmap_port_t:s0 tclass=tcp_socket
audit(1143051102.334:1219773): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfa7fbec a2=da4ff4 a3=0 items=0 pid=24150 auid=1567 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 comm="dbus-daemon" exe="/bin/dbus-daemon"
audit(1143051102.334:1219773): saddr=0200006F7F00000168C56709C0916700 audit(1143051102.334:1219773): nargs=3 a0=c a1=bfa7fcfc a2=10
I'm sure I missed something simple (as usual). Any hints?
If it helps, I'm using:
selinux-policy-2.2.23-15 selinux-policy-targeted-2.2.23-15
Thanks for any pointers, Tim
Are you running on an NIS machine? If yes is the allow_ypbind boolean turned on?
getsebool allow_ypbind
If not turn it on
setsebool -P allow_ypbind=1
Thanks - that fixed it.
-Tim
selinux@lists.fedoraproject.org