Here are a few. I'm proably missing a couple.
type=KERNEL msg=audit(1111959628.755:7920758): avc: denied { execmod } for pid=4999 comm=java path=/tmp/OraInstall2005-03-27_04-40-25PM/jre/1.4.2/lib/i386/libawt.so dev=dm-0 ino=24805454 scontext=user_u:system_r:unconfined_t tcontext=user_u:object_r:tmp_t tclass=file
type=KERNEL msg=audit(1111964279.919:4868244): avc: denied { execmod } for pid=11157 comm=sqlplus path=/home/oracle/product/10.1.0.3/db_1/lib/libnnz10.so dev=dm-0 ino=22156870 scontext=user_u:system_r:unconfined_t tcontext=user_u:object_r:default_t tclass=file
type=KERNEL msg=audit(1111886867.258:4765664): avc: denied { execmod } for pid=14855 comm=acroread path=/usr/local/Acrobat5/Reader/intellinux/plug_ins/EScript.api dev=dm-0 ino=17137671 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t tclass=file type=KERNEL
type=KERNEL msg=audit(1111886872.812:4776455): avc: denied { execmod } for pid=14855 comm=acroread path=/usr/local/Acrobat5/Reader/intellinux/plug_ins/AcroForm.api dev=dm-0 ino=17137670 scontext=user_u:system_r:unconfined_t tcontext=root:object_r:usr_t tclass=file
type=KERNEL msg=audit(1111869963.161:9878793): avc: denied { execmod } for pid=4025 comm=sqlplus path=/usr/local/oracle/10.1.0.3/instantclient/libnnz10.so dev=dm-0 ino=17072136 scontext=root:system_r:unconfined_t tcontext=root:object_r:usr_t tclass=file
type=KERNEL msg=audit(1112056858.614:16116284): avc: denied { execmod } for pid=3745 comm=lsnrctl path=/home/oracle/product/10.1.0.3/db_1/lib/libnnz10.so dev=dm-0 ino=22156870 scontext=user_u:system_r:unconfined_t tcontext=user_u:object_r:default_t tclass=file
I am also see this denial which I have not tried to correct yet.
type=KERNEL msg=audit(1112065394.195:532494): avc: denied { search } for pid=10489 exe=/sbin/ifconfig name=oracle dev=dm-0 ino=21528581 scontext=oracle:system_r:ifconfig_t tcontext=user_u:object_r:user_home_dir_t tclass=dir
Alan
On Mon, 2005-03-28 at 23:26 -0500, Alan J. Gagne wrote:
Here are a few. I'm proably missing a couple.
Now I'm sorry I asked :) Most arbitrary placement of files...ever
Basically SELinux is not going to work once you start installing third party apps, especially if they put files all over the place.
There's an acroread package in Dag's repository. I don't know about oracle.