Package: selinux-policy-default
Version: 2:0.0.20080702-14
Severity: normal
Hi,
running xserver-xorg-core 2:1.6.1-1, I get the following from ``grep
avc: /var/log/Xorg.0.log''. Let me know if there's anything I can do to
help.
Cheers,
Julien
(WW) avc: denied { create setattr } for request=X11:CreateGC comm=xrdb
resid=400000 restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc
(WW) avc: denied { destroy } for request=X11:FreeGC comm=xrdb resid=400000
restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc
(WW) avc: denied { query } for request=X11:QueryExtension
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid extension=BIG-REQUESTS
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:std_xext_t:s0 tclass=x_extension
(WW) avc: denied { use } for request=BIG-REQUESTS:Enable
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid extension=BIG-REQUESTS
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:std_xext_t:s0 tclass=x_extension
(WW) avc: denied { getattr } for request=X11:CreateGC
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=ab restype=WINDOW
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:xdm_rootwindow_t:s0 tclass=x_drawable
(WW) avc: denied { create setattr } for request=X11:CreateGC
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=400000 restype=GC
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:system_dbusd_t:s0 tclass=x_gc
(WW) avc: denied { get_property } for request=X11:GetProperty
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=ab restype=WINDOW
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:object_r:xdm_rootwindow_t:s0 tclass=x_drawable
(WW) avc: denied { read } for request=X11:GetProperty
comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid property=RESOURCE_MANAGER
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=unconfined_u:object_r:info_xproperty_t:s0 tclass=x_property
(WW) avc: denied { read } for request=X11:CreateGlyphCursor
comm=/usr/bin/fluxbox resid=800003 restype=FONT
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_resource
(WW) avc: denied { create } for request=X11:CreateGlyphCursor
comm=/usr/bin/fluxbox resid=800004 restype=CURSOR
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor
(WW) avc: denied { use } for request=X11:ChangeWindowAttributes
comm=/usr/bin/fluxbox resid=800022 restype=CURSOR
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor
(WW) avc: denied { write } for request=RENDER:CreateGlyphSet
comm=/usr/bin/fluxbox resid=800024 restype=GLYPHSET
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_resource
(WW) avc: denied { create } for request=X11:CreatePixmap
comm=/usr/bin/fluxbox resid=800025 restype=PIXMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { write } for request=X11:PutImage comm=/usr/bin/fluxbox
resid=800025 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { use } for request=X11:PutImage comm=/usr/bin/fluxbox
resid=800000 restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc
(WW) avc: denied { read } for request=X11:ChangeWindowAttributes
comm=/usr/bin/fluxbox resid=800025 restype=PIXMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { getattr } for request=X11:CreateGC comm=/usr/bin/fluxbox
resid=800101 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { manage } for request=X11:SetCloseDownMode comm=fbsetroot
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_client
(WW) avc: denied { destroy } for request=X11:FreePixmap comm=/usr/bin/fluxbox
resid=800361 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { add_child } for request=RENDER:CreatePicture
comm=/usr/bin/fluxbox resid=80039c restype=PIXMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable
(WW) avc: denied { write } for request=X11:RecolorCursor comm=xterm
resid=c00002 restype=CURSOR scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor
(WW) avc: denied { destroy } for request=X11:FreeCursor
comm=/usr/lib/iceweasel/firefox-bin resid=160003b restype=CURSOR
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor
(WW) avc: denied { create } for request=X11:CreateColormap comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { use } for request=X11:CreateWindow comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { read } for request=X11:LookupColor comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { add_color } for request=X11:AllocColor comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { install } for request=X11:InstallColormap comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { remove_color } for request=X11:FreeColors comm=xlock
resid=1e00005 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { destroy } for request=X11:FreeColormap comm=xlock
resid=1e00085 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
(WW) avc: denied { getattr } for request=X11:CopyGC comm=xpdf resid=240000d
restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc
(WW) avc: denied null for request=X11:GetAtomName comm=xev xdevice="Virtual
core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual
core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual
core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual
core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:SendEvent comm=kile xdevice="Virtual
core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:GetInputFocus comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied null for request=X11:SetClipRectangles comm=kile
xdevice="Virtual core keyboard"
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device
(WW) avc: denied { uninstall } for request=X11:UninstallColormap
comm=/usr/bin/fluxbox resid=2a00001 restype=COLORMAP
scontext=unconfined_u:unconfined_r:unconfined_t:s0
tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages selinux-policy-default depends on:
ii libpam-modules 1.0.1-9 Pluggable Authentication Modules f
ii libselinux1 2.0.71-1 SELinux shared libraries
ii libsepol1 2.0.32-1 Security Enhanced Linux policy lib
ii policycoreutils 2.0.55-1 SELinux core policy utilities
ii python 2.5.4-2 An interactive high-level object-o
Versions of packages selinux-policy-default recommends:
ii checkpolicy 2.0.16-3 SELinux policy compiler
ii setools 3.3.5.ds-5 tools for Security Enhanced Linux
Versions of packages selinux-policy-default suggests:
pn logcheck <none> (no description available)
pn syslog-summary <none> (no description available)
-- no debconf information
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
