SCIENTIFIC-LINUX-USERS Archives

May 2011

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV
Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
SL6, SELinux, openafs
From:
Orion Poplawski <[log in to unmask]>
Reply To:
Orion Poplawski <[log in to unmask]>
Date:
Thu, 12 May 2011 15:04:21 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (34 lines) 
I'm just trying out openafs on SL6 and ran into the following starting the afs 
daemon:

Starting AFS client.....
afsd: some file missing or bad in /usr/vice/etc

Running in permissive mode it worked and the following denials were logged:

type=AVC msg=audit(1305234031.892:15130): avc:  denied  { search } for 
pid=2986 comm="afsd" name="etc" dev=vda1 ino=285455 
scontext=unconfined_u:system_r:afs_t:s0 
tcontext=system_u:object_r:afs_config_t:s0 tclass=dir
type=AVC msg=audit(1305234031.892:15130): avc:  denied  { read } for  pid=2986 
comm="afsd" name="ThisCell" dev=vda1 ino=285515 
scontext=unconfined_u:system_r:afs_t:s0 
tcontext=system_u:object_r:afs_config_t:s0 tclass=file
type=AVC msg=audit(1305234031.892:15130): avc:  denied  { open } for  pid=2986 
comm="afsd" name="ThisCell" dev=vda1 ino=285515 
scontext=unconfined_u:system_r:afs_t:s0 
tcontext=system_u:object_r:afs_config_t:s0 tclass=file
type=AVC msg=audit(1305234031.894:15131): avc:  denied  { getattr } for 
pid=2986 comm="afsd" path="/usr/afs/etc/ThisCell" dev=vda1 ino=285515 
scontext=unconfined_u:system_r:afs_t:s0 
tcontext=system_u:object_r:afs_config_t:s0 tclass=file

Is this a known issue?

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  [log in to unmask]
Boulder, CO 80301              http://www.cora.nwra.com

ATOM RSS1 RSS2