Robin Bowes;239542 Wrote:
> Try this as root:
I guess I should have known that...
audit.log:
Code:
--------------------
type=USER_START msg=audit(1193933557.943:45): user pid=2442 uid=0 auid=0
subj=root:system_r:initrc_t:s0 msg='PAM: session open acct=squeezecenter :
exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=CRED_ACQ msg=audit(1193933557.944:46): user pid=2442 uid=0 auid=0
subj=root:system_r:initrc_t:s0 msg='PAM: setcred acct=squeezecenter :
exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=AVC msg=audit(1193933558.456:47): avc: denied { execmod } for
pid=2467 comm="squeezecenter-s" name="mysql.so" dev=dm-0 ino=427324
scontext=root:system_r:initrc_t:s0 tcontext=system_u:object_r:lib_t:s0
tclass=file
type=SYSCALL msg=audit(1193933558.456:47): arch=40000003 syscall=125
success=no exit=-13 a0=4fc000 a1=2a000 a2=5 a3=bfc58f30 items=0 ppid=2443
pid=2467 auid=0 uid=100 gid=101 euid=100 suid=100 fsuid=100 egid=101 sgid=101
fsgid=101 tty=(none) comm="squeezecenter-s" exe="/usr/bin/perl"
subj=root:system_r:initrc_t:s0 key=(null)
type=AVC_PATH msg=audit(1193933558.456:47):
path="/usr/share/squeezecenter/CPAN/arch/5.8/i386-linux-thread-multi/auto/DBD/mysql/mysql.so"
type=CRED_DISP msg=audit(1193933558.475:48): user pid=2442 uid=0 auid=0
subj=root:system_r:initrc_t:s0 msg='PAM: setcred acct=squeezecenter :
exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/1 res=success)'
type=USER_END msg=audit(1193933558.478:49): user pid=2442 uid=0 auid=0
subj=root:system_r:initrc_t:s0 msg='PAM: session close acct=squeezecenter :
exe="/sbin/runuser" (hostname=?, addr=?, terminal=pts/1 res=success)'
--------------------
Code:
--------------------
[EMAIL PROTECTED] ~]# audit2allow -i /var/log/audit/audit.log -l
allow initrc_t lib_t:file execmod;
--------------------
Code:
--------------------
[EMAIL PROTECTED] ~]# ls -lZ `locate Expat.so`
-rwxr-xr-x root root system_u:object_r:lib_t
/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/XML/Parser/Expat/Expat.so
-rwxr-xr-x root root system_u:object_r:lib_t
/usr/share/squeezecenter/CPAN/arch/5.8/i386-linux-thread-multi/auto/XML/Parser/Expat/Expat.so
-rwxr-xr-x root root system_u:object_r:lib_t
/usr/share/squeezecenter/CPAN/arch/5.8/x86_64-linux-thread-multi/auto/XML/Parser/Expat/Expat.so
--------------------
> What platform are you on? i386 or x86_64 ?
i386 running under VMWare
--
Fletch
------------------------------------------------------------------------
Fletch's Profile: http://forums.slimdevices.com/member.php?userid=529
View this thread: http://forums.slimdevices.com/showthread.php?t=39789
_______________________________________________
beta mailing list
beta@lists.slimdevices.com
http://lists.slimdevices.com/lists/listinfo/beta
