avc: denied messages

avc: denied messages

[Carlos Anísio Monteiro]

Helo.

When system boot process is running up a lot of messages "avc: denied" 
are displayed, in permissive mode e enforcing mode. In permissive mode, 
for all the messages "avc: denied" the boot process is completed and the 
login prompt is showed. However, in enforcing mode, it displayed the 
messages "avc: denied", but also displayed others messages: "INIT: Id 
"runlevel number" respawning too fast: disable for 5 minutes", "INIT: no 
more processes left in this runlevel"; and stop the boot process.
Please, how I resolve this ?

PS. I appended the line "/.journal <<none>>" in the file_context file, 
because one error message is displayed when compiling the rules.

thanks.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: avc: denied messages

[Russell Coker]

On Tue, 14 Oct 2003 04:15, Carlos Anísio Monteiro wrote:
> When system boot process is running up a lot of messages "avc: denied"
> are displayed, in permissive mode e enforcing mode. In permissive mode,
> for all the messages "avc: denied" the boot process is completed and the
> login prompt is showed. However, in enforcing mode, it displayed the
> messages "avc: denied", but also displayed others messages: "INIT: Id
> "runlevel number" respawning too fast: disable for 5 minutes", "INIT: no
> more processes left in this runlevel"; and stop the boot process.
> Please, how I resolve this ?

To answer this question we need to know the exact messages in question, both 
the AVC messages and which ID init says is respawning too fast.

> PS. I appended the line "/.journal <<none>>" in the file_context file,
> because one error message is displayed when compiling the rules.

What error?

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.