Package: selinux-policy-default Version: 2:0.0.20080702-14 Severity: normal
Hi, running xserver-xorg-core 2:1.6.1-1, I get the following from ``grep avc: /var/log/Xorg.0.log''. Let me know if there's anything I can do to help. Cheers, Julien (WW) avc: denied { create setattr } for request=X11:CreateGC comm=xrdb resid=400000 restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc (WW) avc: denied { destroy } for request=X11:FreeGC comm=xrdb resid=400000 restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc (WW) avc: denied { query } for request=X11:QueryExtension comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid extension=BIG-REQUESTS scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:std_xext_t:s0 tclass=x_extension (WW) avc: denied { use } for request=BIG-REQUESTS:Enable comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid extension=BIG-REQUESTS scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:std_xext_t:s0 tclass=x_extension (WW) avc: denied { getattr } for request=X11:CreateGC comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=ab restype=WINDOW scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:xdm_rootwindow_t:s0 tclass=x_drawable (WW) avc: denied { create setattr } for request=X11:CreateGC comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=400000 restype=GC scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:system_dbusd_t:s0 tclass=x_gc (WW) avc: denied { get_property } for request=X11:GetProperty comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid resid=ab restype=WINDOW scontext=system_u:system_r:system_dbusd_t:s0 tcontext=system_u:object_r:xdm_rootwindow_t:s0 tclass=x_drawable (WW) avc: denied { read } for request=X11:GetProperty comm=/usr/lib/ConsoleKit/ck-get-x11-server-pid property=RESOURCE_MANAGER scontext=system_u:system_r:system_dbusd_t:s0 tcontext=unconfined_u:object_r:info_xproperty_t:s0 tclass=x_property (WW) avc: denied { read } for request=X11:CreateGlyphCursor comm=/usr/bin/fluxbox resid=800003 restype=FONT scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_resource (WW) avc: denied { create } for request=X11:CreateGlyphCursor comm=/usr/bin/fluxbox resid=800004 restype=CURSOR scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor (WW) avc: denied { use } for request=X11:ChangeWindowAttributes comm=/usr/bin/fluxbox resid=800022 restype=CURSOR scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor (WW) avc: denied { write } for request=RENDER:CreateGlyphSet comm=/usr/bin/fluxbox resid=800024 restype=GLYPHSET scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_resource (WW) avc: denied { create } for request=X11:CreatePixmap comm=/usr/bin/fluxbox resid=800025 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { write } for request=X11:PutImage comm=/usr/bin/fluxbox resid=800025 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { use } for request=X11:PutImage comm=/usr/bin/fluxbox resid=800000 restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc (WW) avc: denied { read } for request=X11:ChangeWindowAttributes comm=/usr/bin/fluxbox resid=800025 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { getattr } for request=X11:CreateGC comm=/usr/bin/fluxbox resid=800101 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { manage } for request=X11:SetCloseDownMode comm=fbsetroot scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=x_client (WW) avc: denied { destroy } for request=X11:FreePixmap comm=/usr/bin/fluxbox resid=800361 restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { add_child } for request=RENDER:CreatePicture comm=/usr/bin/fluxbox resid=80039c restype=PIXMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_drawable (WW) avc: denied { write } for request=X11:RecolorCursor comm=xterm resid=c00002 restype=CURSOR scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor (WW) avc: denied { destroy } for request=X11:FreeCursor comm=/usr/lib/iceweasel/firefox-bin resid=160003b restype=CURSOR scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_cursor (WW) avc: denied { create } for request=X11:CreateColormap comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { use } for request=X11:CreateWindow comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { read } for request=X11:LookupColor comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { add_color } for request=X11:AllocColor comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { install } for request=X11:InstallColormap comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { remove_color } for request=X11:FreeColors comm=xlock resid=1e00005 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { destroy } for request=X11:FreeColormap comm=xlock resid=1e00085 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap (WW) avc: denied { getattr } for request=X11:CopyGC comm=xpdf resid=240000d restype=GC scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_gc (WW) avc: denied null for request=X11:GetAtomName comm=xev xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=RENDER:CompositeGlyphs8 comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:UnmapWindow comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:SendEvent comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:GetInputFocus comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied null for request=X11:SetClipRectangles comm=kile xdevice="Virtual core keyboard" scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:system_r:xdm_xserver_t:s0-s0:c0.c1023 tclass=x_device (WW) avc: denied { uninstall } for request=X11:UninstallColormap comm=/usr/bin/fluxbox resid=2a00001 restype=COLORMAP scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=unconfined_u:object_r:unconfined_t:s0 tclass=x_colormap -- System Information: Debian Release: squeeze/sid APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (101, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.26-2-686 (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages selinux-policy-default depends on: ii libpam-modules 1.0.1-9 Pluggable Authentication Modules f ii libselinux1 2.0.71-1 SELinux shared libraries ii libsepol1 2.0.32-1 Security Enhanced Linux policy lib ii policycoreutils 2.0.55-1 SELinux core policy utilities ii python 2.5.4-2 An interactive high-level object-o Versions of packages selinux-policy-default recommends: ii checkpolicy 2.0.16-3 SELinux policy compiler ii setools 3.3.5.ds-5 tools for Security Enhanced Linux Versions of packages selinux-policy-default suggests: pn logcheck <none> (no description available) pn syslog-summary <none> (no description available) -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org