public inbox for linux-audit@redhat.com
 help / color / mirror / Atom feed
* restorecon resets files
@ 2008-10-06 14:03 LC Bruzenak
  2008-10-06 20:05 ` Daniel J Walsh
  0 siblings, 1 reply; 2+ messages in thread
From: LC Bruzenak @ 2008-10-06 14:03 UTC (permalink / raw)
  To: Linux Audit

# ls -Z /var/run/auditd.pid /var/run/audispd_events
srw-r-----  root root system_u:object_r:audisp_var_run_t:SystemHigh /var/run/audispd_events
-rw-r--r--  root root system_u:object_r:auditd_var_run_t:SystemHigh /var/run/auditd.pid

# restorecon -rv /var/run/
restorecon reset /var/run/audispd_events context system_u:object_r:audisp_var_run_t:s15:c0.c1023->system_u:object_r:audisp_var_run_t:s0
restorecon reset /var/run/auditd.pid context system_u:object_r:auditd_var_run_t:s15:c0.c1023->system_u:object_r:auditd_var_run_t:s0

[root@hugo ~]# ls -Z /var/run/auditd.pid /var/run/audispd_events
srw-r-----  root root system_u:object_r:audisp_var_run_t:SystemLow /var/run/audispd_events
-rw-r--r--  root root system_u:object_r:auditd_var_run_t:SystemLow /var/run/auditd.pid

I assume that both these files should be kept at SystemHigh?

selinux-policy-mls-3.4.2-14.fc9.noarch

Thx,
LCB.

-- 
LC (Lenny) Bruzenak
lenny@magitekltd.com

^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: restorecon resets files
  2008-10-06 14:03 restorecon resets files LC Bruzenak
@ 2008-10-06 20:05 ` Daniel J Walsh
  0 siblings, 0 replies; 2+ messages in thread
From: Daniel J Walsh @ 2008-10-06 20:05 UTC (permalink / raw)
  To: LC Bruzenak; +Cc: Linux Audit

LC Bruzenak wrote:
> # ls -Z /var/run/auditd.pid /var/run/audispd_events
> srw-r-----  root root system_u:object_r:audisp_var_run_t:SystemHigh /var/run/audispd_events
> -rw-r--r--  root root system_u:object_r:auditd_var_run_t:SystemHigh /var/run/auditd.pid
> 
> # restorecon -rv /var/run/
> restorecon reset /var/run/audispd_events context system_u:object_r:audisp_var_run_t:s15:c0.c1023->system_u:object_r:audisp_var_run_t:s0
> restorecon reset /var/run/auditd.pid context system_u:object_r:auditd_var_run_t:s15:c0.c1023->system_u:object_r:auditd_var_run_t:s0
> 
> [root@hugo ~]# ls -Z /var/run/auditd.pid /var/run/audispd_events
> srw-r-----  root root system_u:object_r:audisp_var_run_t:SystemLow /var/run/audispd_events
> -rw-r--r--  root root system_u:object_r:auditd_var_run_t:SystemLow /var/run/auditd.pid
> 
> I assume that both these files should be kept at SystemHigh?
> 
> selinux-policy-mls-3.4.2-14.fc9.noarch
> 
> Thx,
> LCB.
> 
Yes that is a bug.

^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2008-10-06 20:05 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2008-10-06 14:03 restorecon resets files LC Bruzenak
2008-10-06 20:05 ` Daniel J Walsh

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox