http://blog.gmane.org/gmane.linux.redhat.fedora.selinux hourly 1 1901-01-01T00:00+00:00 http://gmane.org/img/gmane-25t.png http://gmane.org http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14213 <pre> I have it installed, though I think I found what is causing the above error. When I compiled all core selinux-related dependencies, I based them on python 3 instead of python 2. I am still on the "old" version of python 2 (the one which comes with FC13), because in order to upgrade it I have to also do that for another 100+ packages I have on my system and that it is something I can't undertake at the moment. I assumed, wrongly as it turned out, that python 3 would be 100% replacement for python 2 and since I remember the nightmare I had to go through when I did the same exercise when upgrading the core selinux tools in order to bring them to the FC15 level and trying to make this work with the "old" python 2 version I've had on my system, I thought I could get away with just using python 3 this time. Well, that didn't work and it looks as though python 2 is also needed (a fact I confirmed a couple of hours after writing my original post as /usr/bin/sepolgen-ifgen uses python 2, not python 3), so I am probably going to have to go through the same exercise as before. Luckily for me, I still keep my old patches, so I am hoping that all is not lost. On an unrelated note - I seem to remember (probably by reading it on this ML) that there are changes in the language syntax for the new version of the tools/policy. What are these changes and where can I find a doc/man pages to get myself up to speed? -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Mr Dash Four 2012-05-25T12:43:46 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14212 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/24/2012 09:48 PM, Mr Dash Four wrote: yum install libselinux-python -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+/WoEACgkQrlYvE4MpobNhkQCgp9HXM+rGX6qv/YzmACSsY2BO hrUAoOtp6AFvRZaSNueSxUY3LiRTZ2Sc =6EDL -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-25T10:10:09 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14211 <pre>I am trying to compile and build version 3.10.0-86 of the selinux policy, but during compilation I get the following: /usr/bin/semodule_expand tmp/test.lnk tmp/policy.bin /usr/bin/sepolgen-ifgen -p tmp/policy.bin -i policy -o tmp/output Traceback (most recent call last): File "/usr/bin/sepolgen-ifgen", line 34, in &lt;module&gt; import selinux ImportError: No module named selinux make: *** [validate] Error 1 error: Bad exit status from /var/tmp/rpm-tmp.bEqivE (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.bEqivE (%install) What could be the cause for this? -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Mr Dash Four 2012-05-25T01:48:08 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14210 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/24/2012 12:24 PM, David Quigley wrote: What policy file did it build? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk++hXMACgkQrlYvE4MpobMToACgo2k5nt6bCjr1/7tv1Zr1AeuG 6XYAn1RfCfxEsIvu0RqvIYswxg6HII6q =g2JS -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-24T19:01:07 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14209 <pre> I don't think your post applies to his question. His email seems to indicate to me that he is building the policy binary on RHEL 6 for RHEL 6 and then on install time its trying to downgrade the policy. He is wondering why it didn't just build for the policy version being used by the system. Dave -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> David Quigley 2012-05-24T16:24:50 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14208 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/24/2012 11:05 AM, Moray Henderson wrote: Read http://danwalsh.livejournal.com/49762.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk++XlAACgkQrlYvE4MpobMf+wCghm6D/Gn5Yh9mLIHF1vTo5k2m 7KkAnRSdi7LWcywz1LeE6ir8nygh1wVj =hxTJ -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-24T16:14:08 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14207 <pre>I've got a policy module which works fine when I build and load it on CentOS 5. When I build and try to load it on CentOS 6 it complains: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.24, searching for an older version. SELinux: Could not open policy file &lt;= /etc/selinux/targeted/policy/policy.24: No such file or directory There's nothing in the policy source specifying version so I would have expected the module automatically to build for the correct policy version when built on CentOS 6. Any pointers where to look or what to do next? Moray. "To err is human; to purr, feline." -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Moray Henderson 2012-05-24T15:05:59 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14206 <pre> No go: selinux-policy-targeted-3.7.19-153.el6.noarch selinux-policy-3.7.19-153.el6.noarch require { type sendmail_t; type spamc_t; type home_bin_t; type procmail_t; class process { siginh noatsecure rlimitinh }; class dir search; } #============= procmail_t ============== allow procmail_t home_bin_t:dir search; allow procmail_t spamc_t:process { siginh rlimitinh noatsecure }; #============= sendmail_t ============== allow sendmail_t procmail_t:process { siginh rlimitinh noatsecure }; I've attached the AVC and SYSCALL messages from audit.log from when I upgraded to 3.7.19-153. I believe the "semodule -DB" I did yesterday should still be in effect, so this includes things that are normally dontaudited. type=AVC msg=audit(1337366173.791:7373): avc: denied { read } for pid=23438 comm="load_policy" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_tmp_t:s0 tclass=file type=AVC msg=audit(1337366173.791:7373): avc: denied { read } for pid=23438 comm="load_policy" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_tmp_t:s0 tclass=file type=SYSCALL msg=audit(1337366173.791:7373): arch=c000003e syscall=59 success=yes exit=0 a0=1d44ed0 a1=1d4b2a0 a2=1d43250 a3=7fff9dc32680 items=0 ppid=23430 pid=23438 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) type=SYSCALL msg=audit(1337366173.797:7374): arch=c000003e syscall=1 success=yes exit=4195581 a0=4 a1=7f1081beb000 a2=4004fd a3=7fff636ea180 items=0 ppid=23430 pid=23438 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366175.729:7375): avc: denied { read } for pid=23475 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_tmp_t:s0 tclass=file type=AVC msg=audit(1337366175.729:7375): avc: denied { read } for pid=23475 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_tmp_t:s0 tclass=file type=SYSCALL msg=audit(1337366175.729:7375): arch=c000003e syscall=59 success=yes exit=0 a0=1f85c90 a1=1f90c40 a2=1f89050 a3=7fff4c6e98b0 items=0 ppid=23440 pid=23475 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366176.793:7376): avc: denied { read } for pid=23869 comm="restorecon" path="/tmp/tmpTA16yC" dev=dm-1 ino=1019 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:rpm_tmp_t:s0 tclass=file type=SYSCALL msg=audit(1337366176.793:7376): arch=c000003e syscall=59 success=yes exit=0 a0=1d4a580 a1=1d43510 a2=1d43250 a3=7fff9dc32b80 items=0 ppid=23427 pid=23869 auid=10002 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=13 comm="restorecon" exe="/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366198.250:7377): avc: denied { rlimitinh } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366198.250:7377): avc: denied { siginh } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366198.250:7377): avc: denied { noatsecure } for pid=23877 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366198.250:7377): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23876 pid=23877 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.389:7378): avc: denied { search } for pid=23879 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366198.389:7378): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a5ac a1=a6a5d0 a2=a6cd70 a3=7fff8af6a3e0 items=0 ppid=23878 pid=23879 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.405:7379): avc: denied { search } for pid=23881 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366198.405:7379): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a5ac a1=a6d720 a2=a6cd70 a3=7fff8af6a3e0 items=0 ppid=23880 pid=23881 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.657:7380): avc: denied { search } for pid=23882 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366198.657:7380): arch=c000003e syscall=59 success=no exit=-13 a0=a6f1e0 a1=a6a5b0 a2=a6ced0 a3=7fff8af6a4b0 items=0 ppid=23877 pid=23882 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.657:7381): avc: denied { search } for pid=23883 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366198.657:7381): arch=c000003e syscall=59 success=no exit=-13 a0=7fff8af6a66c a1=a6cd10 a2=a6ced0 a3=7fff8af6a4b0 items=0 ppid=23877 pid=23883 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.659:7382): avc: denied { search } for pid=23882 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366198.659:7382): arch=c000003e syscall=2 success=no exit=-13 a0=2334460 a1=0 a2=2334487 a3=28 items=0 ppid=23877 pid=23882 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366198.661:7383): avc: denied { rlimitinh } for pid=23885 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366198.661:7383): avc: denied { siginh } for pid=23885 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366198.661:7383): avc: denied { noatsecure } for pid=23885 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366198.661:7383): arch=c000003e syscall=59 success=yes exit=0 a0=a6f1e0 a1=a6c990 a2=a6d090 a3=7fff8af6a490 items=0 ppid=23884 pid=23885 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366198.864:7384): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366198.864:7384): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366207.255:7391): avc: denied { rlimitinh } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process type=AVC msg=audit(1337366207.255:7391): avc: denied { siginh } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process type=AVC msg=audit(1337366207.255:7391): avc: denied { noatsecure } for pid=23891 comm="unix_chkpwd" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1337366207.255:7391): arch=c000003e syscall=59 success=yes exit=0 a0=7fae70f91c98 a1=7fff7b8f4d00 a2=7fae71194350 a3=a items=0 ppid=23889 pid=23891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="unix_chkpwd" exe="/sbin/unix_chkpwd" subj=system_u:system_r:chkpwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366207.551:7405): avc: denied { siginh } for pid=23894 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process type=AVC msg=audit(1337366207.551:7405): avc: denied { noatsecure } for pid=23894 comm="sh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1337366207.551:7405): arch=c000003e syscall=59 success=yes exit=0 a0=7fae72c08463 a1=7fff7b8f26b0 a2=7fae75c7b560 a3=7fae72441240 items=0 ppid=23893 pid=23894 auid=10002 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=pts2 ses=32 comm="sh" exe="/bin/bash" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366207.694:7406): avc: denied { siginh } for pid=23893 comm="tcsh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process type=AVC msg=audit(1337366207.694:7406): avc: denied { noatsecure } for pid=23893 comm="tcsh" scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1337366207.694:7406): arch=c000003e syscall=59 success=yes exit=0 a0=7fae75c72070 a1=7fff7b8f48e0 a2=7fae75c7b560 a3=0 items=0 ppid=23892 pid=23893 auid=10002 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=pts2 ses=32 comm="tcsh" exe="/bin/tcsh" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1337366235.896:7407): avc: denied { rlimitinh } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366235.896:7407): avc: denied { siginh } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366235.896:7407): avc: denied { noatsecure } for pid=23912 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366235.896:7407): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23911 pid=23912 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366235.901:7408): avc: denied { search } for pid=23914 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366235.901:7408): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840bac a1=1a7c5d0 a2=1a80090 a3=7fff308409e0 items=0 ppid=23913 pid=23914 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366235.904:7409): avc: denied { search } for pid=23916 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366235.904:7409): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840bac a1=1a7f5e0 a2=1a80090 a3=7fff308409e0 items=0 ppid=23915 pid=23916 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366236.154:7410): avc: denied { search } for pid=23917 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366236.154:7410): arch=c000003e syscall=59 success=no exit=-13 a0=1a80130 a1=1a7c5b0 a2=1a7d320 a3=7fff30840ab0 items=0 ppid=23912 pid=23917 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366236.154:7411): avc: denied { search } for pid=23918 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366236.154:7411): arch=c000003e syscall=59 success=no exit=-13 a0=7fff30840c6c a1=1a7f2d0 a2=1a7d320 a3=7fff30840ab0 items=0 ppid=23912 pid=23918 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366236.156:7412): avc: denied { search } for pid=23917 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366236.156:7412): arch=c000003e syscall=2 success=no exit=-13 a0=1d29460 a1=0 a2=1d29487 a3=28 items=0 ppid=23912 pid=23917 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366236.159:7413): avc: denied { rlimitinh } for pid=23920 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366236.159:7413): avc: denied { siginh } for pid=23920 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366236.159:7413): avc: denied { noatsecure } for pid=23920 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366236.159:7413): arch=c000003e syscall=59 success=yes exit=0 a0=1a80130 a1=1a7f680 a2=1a7d510 a3=7fff30840a90 items=0 ppid=23919 pid=23920 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366236.171:7414): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366236.171:7414): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366322.148:7415): avc: denied { rlimitinh } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366322.148:7415): avc: denied { siginh } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366322.148:7415): avc: denied { noatsecure } for pid=23930 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366322.148:7415): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23929 pid=23930 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.497:7416): avc: denied { search } for pid=23932 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366322.497:7416): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e21dc a1=21765d0 a2=2178da0 a3=7fff105e2010 items=0 ppid=23931 pid=23932 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.500:7417): avc: denied { search } for pid=23934 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366322.500:7417): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e21dc a1=2178930 a2=2178da0 a3=7fff105e2010 items=0 ppid=23933 pid=23934 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.798:7418): avc: denied { search } for pid=23935 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366322.798:7418): arch=c000003e syscall=59 success=no exit=-13 a0=217b770 a1=21765b0 a2=2178ec0 a3=7fff105e20e0 items=0 ppid=23930 pid=23935 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.798:7419): avc: denied { search } for pid=23936 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366322.798:7419): arch=c000003e syscall=59 success=no exit=-13 a0=7fff105e229c a1=2178d40 a2=2178ec0 a3=7fff105e20e0 items=0 ppid=23930 pid=23936 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.799:7420): avc: denied { search } for pid=23935 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366322.799:7420): arch=c000003e syscall=2 success=no exit=-13 a0=24dd460 a1=0 a2=24dd487 a3=28 items=0 ppid=23930 pid=23935 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366322.803:7421): avc: denied { rlimitinh } for pid=23938 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366322.803:7421): avc: denied { siginh } for pid=23938 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366322.803:7421): avc: denied { noatsecure } for pid=23938 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366322.803:7421): arch=c000003e syscall=59 success=yes exit=0 a0=217b770 a1=21789f0 a2=2179140 a3=7fff105e20c0 items=0 ppid=23937 pid=23938 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366322.813:7422): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366322.813:7422): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366370.165:7423): avc: denied { rlimitinh } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366370.165:7423): avc: denied { siginh } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366370.165:7423): avc: denied { noatsecure } for pid=23941 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366370.165:7423): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23940 pid=23941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.168:7424): avc: denied { search } for pid=23943 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366370.168:7424): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3e3c a1=1a605d0 a2=1a62c60 a3=7fff5a8b3c70 items=0 ppid=23942 pid=23943 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.171:7425): avc: denied { search } for pid=23945 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366370.171:7425): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3e3c a1=1a63600 a2=1a62c60 a3=7fff5a8b3c70 items=0 ppid=23944 pid=23945 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.458:7426): avc: denied { search } for pid=23946 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366370.458:7426): arch=c000003e syscall=59 success=no exit=-13 a0=1a656e0 a1=1a605b0 a2=1a62d80 a3=7fff5a8b3d40 items=0 ppid=23941 pid=23946 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.458:7427): avc: denied { search } for pid=23947 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366370.458:7427): arch=c000003e syscall=59 success=no exit=-13 a0=7fff5a8b3efc a1=1a62c00 a2=1a62d80 a3=7fff5a8b3d40 items=0 ppid=23941 pid=23947 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.459:7428): avc: denied { search } for pid=23946 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366370.459:7428): arch=c000003e syscall=2 success=no exit=-13 a0=1dbc460 a1=0 a2=1dbc487 a3=28 items=0 ppid=23941 pid=23946 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366370.462:7429): avc: denied { rlimitinh } for pid=23949 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366370.462:7429): avc: denied { siginh } for pid=23949 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366370.462:7429): avc: denied { noatsecure } for pid=23949 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366370.462:7429): arch=c000003e syscall=59 success=yes exit=0 a0=1a656e0 a1=1a636c0 a2=1a63000 a3=7fff5a8b3d20 items=0 ppid=23948 pid=23949 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366370.472:7430): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366370.472:7430): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366406.828:7431): avc: denied { rlimitinh } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366406.828:7431): avc: denied { siginh } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366406.828:7431): avc: denied { noatsecure } for pid=23952 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366406.828:7431): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23951 pid=23952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366406.831:7432): avc: denied { search } for pid=23954 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366406.831:7432): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3e4c a1=7ef5d0 a2=7f37a0 a3=7ffffeff3c80 items=0 ppid=23953 pid=23954 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366406.833:7433): avc: denied { search } for pid=23956 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366406.833:7433): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3e4c a1=7f2490 a2=7f37a0 a3=7ffffeff3c80 items=0 ppid=23955 pid=23956 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366407.121:7434): avc: denied { search } for pid=23957 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366407.121:7434): arch=c000003e syscall=59 success=no exit=-13 a0=7f3840 a1=7ef5b0 a2=7f0320 a3=7ffffeff3d50 items=0 ppid=23952 pid=23957 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366407.121:7435): avc: denied { search } for pid=23958 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366407.121:7435): arch=c000003e syscall=59 success=no exit=-13 a0=7ffffeff3f0c a1=7f3740 a2=7f0320 a3=7ffffeff3d50 items=0 ppid=23952 pid=23958 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366407.122:7436): avc: denied { search } for pid=23957 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366407.122:7436): arch=c000003e syscall=2 success=no exit=-13 a0=24cc460 a1=0 a2=24cc487 a3=28 items=0 ppid=23952 pid=23957 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366407.126:7437): avc: denied { rlimitinh } for pid=23960 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366407.126:7437): avc: denied { siginh } for pid=23960 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366407.126:7437): avc: denied { noatsecure } for pid=23960 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366407.126:7437): arch=c000003e syscall=59 success=yes exit=0 a0=7f3840 a1=7f26a0 a2=7f05a0 a3=7ffffeff3d30 items=0 ppid=23959 pid=23960 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366407.135:7438): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366407.135:7438): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366442.238:7439): avc: denied { rlimitinh } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366442.238:7439): avc: denied { siginh } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366442.238:7439): avc: denied { noatsecure } for pid=23963 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366442.238:7439): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23962 pid=23963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.470:7440): avc: denied { search } for pid=23965 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366442.470:7440): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f1fc a1=9f45d0 a2=9f6d70 a3=7fff12f5f030 items=0 ppid=23964 pid=23965 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.472:7441): avc: denied { search } for pid=23967 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366442.472:7441): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f1fc a1=9f7710 a2=9f6d70 a3=7fff12f5f030 items=0 ppid=23966 pid=23967 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.751:7442): avc: denied { search } for pid=23968 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366442.751:7442): arch=c000003e syscall=59 success=no exit=-13 a0=9f95b0 a1=9f45b0 a2=9f6ed0 a3=7fff12f5f100 items=0 ppid=23963 pid=23968 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.751:7443): avc: denied { search } for pid=23969 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366442.751:7443): arch=c000003e syscall=59 success=no exit=-13 a0=7fff12f5f2bc a1=9f6d10 a2=9f6ed0 a3=7fff12f5f100 items=0 ppid=23963 pid=23969 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.753:7444): avc: denied { search } for pid=23968 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366442.753:7444): arch=c000003e syscall=2 success=no exit=-13 a0=2569460 a1=0 a2=2569487 a3=28 items=0 ppid=23963 pid=23968 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366442.755:7445): avc: denied { rlimitinh } for pid=23971 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366442.755:7445): avc: denied { siginh } for pid=23971 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366442.755:7445): avc: denied { noatsecure } for pid=23971 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366442.755:7445): arch=c000003e syscall=59 success=yes exit=0 a0=9f95b0 a1=9f6990 a2=9f7090 a3=7fff12f5f0e0 items=0 ppid=23970 pid=23971 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366442.765:7446): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366442.765:7446): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366459.230:7447): avc: denied { rlimitinh } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366459.230:7447): avc: denied { siginh } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366459.230:7447): avc: denied { noatsecure } for pid=23974 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366459.230:7447): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23973 pid=23974 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.443:7448): avc: denied { search } for pid=23976 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.443:7448): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac5639dc a1=aa35d0 a2=aa5c90 a3=7fffac563810 items=0 ppid=23975 pid=23976 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.445:7449): avc: denied { search } for pid=23978 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.445:7449): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac5639dc a1=aa54b0 a2=aa5c90 a3=7fffac563810 items=0 ppid=23977 pid=23978 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.698:7450): avc: denied { search } for pid=23980 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.698:7450): arch=c000003e syscall=59 success=no exit=-13 a0=aab6b0 a1=aa35b0 a2=aa5db0 a3=7fffac5638e0 items=0 ppid=23974 pid=23980 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.699:7451): avc: denied { search } for pid=23981 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.699:7451): arch=c000003e syscall=59 success=no exit=-13 a0=7fffac563a9c a1=aa5c30 a2=aa5db0 a3=7fffac5638e0 items=0 ppid=23974 pid=23981 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.699:7452): avc: denied { search } for pid=23980 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.699:7452): arch=c000003e syscall=2 success=no exit=-13 a0=234f460 a1=0 a2=234f487 a3=28 items=0 ppid=23974 pid=23980 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.704:7453): avc: denied { rlimitinh } for pid=23983 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366459.704:7453): avc: denied { siginh } for pid=23983 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366459.704:7453): avc: denied { noatsecure } for pid=23983 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366459.704:7453): arch=c000003e syscall=59 success=yes exit=0 a0=aab6b0 a1=aa6710 a2=aa6030 a3=7fffac5638c0 items=0 ppid=23982 pid=23983 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366459.714:7454): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366459.714:7454): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366459.865:7455): avc: denied { rlimitinh } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366459.865:7455): avc: denied { siginh } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366459.865:7455): avc: denied { noatsecure } for pid=23985 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366459.865:7455): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23984 pid=23985 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.885:7456): avc: denied { search } for pid=23987 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.885:7456): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec80c a1=1bb65d0 a2=1bb8cd0 a3=7fffdc5ec640 items=0 ppid=23986 pid=23987 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366459.889:7457): avc: denied { search } for pid=23989 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366459.889:7457): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec80c a1=1bb9710 a2=1bb8cd0 a3=7fffdc5ec640 items=0 ppid=23988 pid=23989 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366460.707:7458): avc: denied { search } for pid=23990 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366460.707:7458): arch=c000003e syscall=59 success=no exit=-13 a0=1bbb290 a1=1bb65b0 a2=1bb8e40 a3=7fffdc5ec710 items=0 ppid=23985 pid=23990 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366460.709:7459): avc: denied { search } for pid=23990 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366460.709:7459): arch=c000003e syscall=2 success=no exit=-13 a0=b2e460 a1=0 a2=b2e487 a3=28 items=0 ppid=23985 pid=23990 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366460.709:7460): avc: denied { search } for pid=23991 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366460.709:7460): arch=c000003e syscall=59 success=no exit=-13 a0=7fffdc5ec8cc a1=1bb8c40 a2=1bb8e40 a3=7fffdc5ec710 items=0 ppid=23985 pid=23991 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366460.713:7461): avc: denied { rlimitinh } for pid=23993 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366460.713:7461): avc: denied { siginh } for pid=23993 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366460.713:7461): avc: denied { noatsecure } for pid=23993 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366460.713:7461): arch=c000003e syscall=59 success=yes exit=0 a0=1bbb290 a1=1bb8960 a2=1bb90c0 a3=7fffdc5ec6f0 items=0 ppid=23992 pid=23993 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366460.723:7462): avc: denied { read } for pid=22579 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366460.723:7462): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=22579 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366512.035:7463): avc: denied { rlimitinh } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366512.035:7463): avc: denied { siginh } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366512.035:7463): avc: denied { noatsecure } for pid=23999 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366512.035:7463): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=23998 pid=23999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.038:7464): avc: denied { search } for pid=24001 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366512.038:7464): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c4ec a1=f275d0 a2=f29d60 a3=7fffba42c320 items=0 ppid=24000 pid=24001 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.040:7465): avc: denied { search } for pid=24003 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366512.040:7465): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c4ec a1=f2a6e0 a2=f29d60 a3=7fffba42c320 items=0 ppid=24002 pid=24003 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.524:7466): avc: denied { search } for pid=24004 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366512.524:7466): arch=c000003e syscall=59 success=no exit=-13 a0=f2c170 a1=f275b0 a2=f29ec0 a3=7fffba42c3f0 items=0 ppid=23999 pid=24004 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.525:7467): avc: denied { search } for pid=24005 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366512.525:7467): arch=c000003e syscall=59 success=no exit=-13 a0=7fffba42c5ac a1=f29d00 a2=f29ec0 a3=7fffba42c3f0 items=0 ppid=23999 pid=24005 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.526:7468): avc: denied { search } for pid=24004 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366512.526:7468): arch=c000003e syscall=2 success=no exit=-13 a0=1d5e460 a1=0 a2=1d5e487 a3=28 items=0 ppid=23999 pid=24004 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366512.529:7469): avc: denied { rlimitinh } for pid=24007 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366512.529:7469): avc: denied { siginh } for pid=24007 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366512.529:7469): avc: denied { noatsecure } for pid=24007 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366512.529:7469): arch=c000003e syscall=59 success=yes exit=0 a0=f2c170 a1=f29960 a2=f2a080 a3=7fffba42c3d0 items=0 ppid=24006 pid=24007 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366512.539:7470): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366512.539:7470): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366535.630:7471): avc: denied { rlimitinh } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366535.630:7471): avc: denied { siginh } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366535.630:7471): avc: denied { noatsecure } for pid=24010 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366535.630:7471): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24009 pid=24010 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.633:7472): avc: denied { search } for pid=24012 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366535.633:7472): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e7150c a1=12365d0 a2=123a090 a3=7fffb2e71340 items=0 ppid=24011 pid=24012 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.635:7473): avc: denied { search } for pid=24014 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366535.635:7473): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e7150c a1=12395e0 a2=123a090 a3=7fffb2e71340 items=0 ppid=24013 pid=24014 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.942:7474): avc: denied { search } for pid=24015 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366535.942:7474): arch=c000003e syscall=59 success=no exit=-13 a0=123a130 a1=12365b0 a2=1237320 a3=7fffb2e71410 items=0 ppid=24010 pid=24015 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.942:7475): avc: denied { search } for pid=24016 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366535.942:7475): arch=c000003e syscall=59 success=no exit=-13 a0=7fffb2e715cc a1=12392d0 a2=1237320 a3=7fffb2e71410 items=0 ppid=24010 pid=24016 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.943:7476): avc: denied { search } for pid=24015 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366535.943:7476): arch=c000003e syscall=2 success=no exit=-13 a0=12d6460 a1=0 a2=12d6487 a3=28 items=0 ppid=24010 pid=24015 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366535.946:7477): avc: denied { rlimitinh } for pid=24018 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366535.946:7477): avc: denied { siginh } for pid=24018 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366535.946:7477): avc: denied { noatsecure } for pid=24018 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366535.946:7477): arch=c000003e syscall=59 success=yes exit=0 a0=123a130 a1=1239680 a2=1237510 a3=7fffb2e713f0 items=0 ppid=24017 pid=24018 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366535.956:7478): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366535.956:7478): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366778.367:7479): avc: denied { rlimitinh } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366778.367:7479): avc: denied { siginh } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366778.367:7479): avc: denied { noatsecure } for pid=24035 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366778.367:7479): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24034 pid=24035 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.679:7480): avc: denied { search } for pid=24037 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366778.679:7480): arch=c000003e syscall=59 success=no exit=-13 a0=7fff648b16fc a1=1fac5d0 a2=1faed90 a3=7fbe6b4dfdc0 items=0 ppid=24036 pid=24037 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.681:7481): avc: denied { search } for pid=24039 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366778.681:7481): arch=c000003e syscall=59 success=no exit=-13 a0=7fff648b16fc a1=1faf740 a2=1faed90 a3=7fbe6b4dfdc0 items=0 ppid=24038 pid=24039 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.943:7482): avc: denied { search } for pid=24040 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366778.943:7482): arch=c000003e syscall=59 success=no exit=-13 a0=1fb1bd0 a1=1fac5b0 a2=1faeef0 a3=7fff648b1600 items=0 ppid=24035 pid=24040 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.944:7483): avc: denied { search } for pid=24041 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366778.944:7483): arch=c000003e syscall=59 success=no exit=-13 a0=7fff648b17bc a1=1faed30 a2=1faeef0 a3=7fbe6b4dfdc0 items=0 ppid=24035 pid=24041 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.945:7484): avc: denied { search } for pid=24040 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366778.945:7484): arch=c000003e syscall=2 success=no exit=-13 a0=2659460 a1=0 a2=2659487 a3=28 items=0 ppid=24035 pid=24040 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366778.948:7485): avc: denied { rlimitinh } for pid=24043 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366778.948:7485): avc: denied { siginh } for pid=24043 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366778.948:7485): avc: denied { noatsecure } for pid=24043 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366778.948:7485): arch=c000003e syscall=59 success=yes exit=0 a0=1fb1bd0 a1=1fae9b0 a2=1faf0b0 a3=7fff648b15e0 items=0 ppid=24042 pid=24043 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366778.958:7486): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366778.958:7486): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366793.171:7487): avc: denied { rlimitinh } for pid=24046 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366793.171:7487): avc: denied { siginh } for pid=24046 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366793.171:7487): avc: denied { noatsecure } for pid=24046 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366793.171:7487): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24045 pid=24046 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.174:7488): avc: denied { search } for pid=24048 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366793.174:7488): arch=c000003e syscall=59 success=no exit=-13 a0=7fff49fba5bc a1=8315d0 a2=833d60 a3=7fff49fba3f0 items=0 ppid=24047 pid=24048 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.177:7489): avc: denied { search } for pid=24050 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366793.177:7489): arch=c000003e syscall=59 success=no exit=-13 a0=7fff49fba5bc a1=8346e0 a2=833d60 a3=7fff49fba3f0 items=0 ppid=24049 pid=24050 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.433:7490): avc: denied { search } for pid=24051 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366793.433:7490): arch=c000003e syscall=59 success=no exit=-13 a0=8368a0 a1=8315b0 a2=833ec0 a3=7fff49fba4c0 items=0 ppid=24046 pid=24051 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.433:7491): avc: denied { search } for pid=24052 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366793.433:7491): arch=c000003e syscall=59 success=no exit=-13 a0=7fff49fba67c a1=833d00 a2=833ec0 a3=7fff49fba4c0 items=0 ppid=24046 pid=24052 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.434:7492): avc: denied { search } for pid=24051 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366793.434:7492): arch=c000003e syscall=2 success=no exit=-13 a0=26bf460 a1=0 a2=26bf487 a3=28 items=0 ppid=24046 pid=24051 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366793.437:7493): avc: denied { rlimitinh } for pid=24054 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366793.437:7493): avc: denied { siginh } for pid=24054 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366793.437:7493): avc: denied { noatsecure } for pid=24054 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366793.437:7493): arch=c000003e syscall=59 success=yes exit=0 a0=8368a0 a1=833960 a2=834080 a3=7fff49fba4a0 items=0 ppid=24053 pid=24054 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366793.447:7494): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366793.447:7494): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337366836.197:7495): avc: denied { rlimitinh } for pid=24060 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366836.197:7495): avc: denied { siginh } for pid=24060 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337366836.197:7495): avc: denied { noatsecure } for pid=24060 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337366836.197:7495): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24059 pid=24060 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.201:7496): avc: denied { search } for pid=24062 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366836.201:7496): arch=c000003e syscall=59 success=no exit=-13 a0=7fff693472ec a1=1cfc5d0 a2=1d00090 a3=7fff69347120 items=0 ppid=24061 pid=24062 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.203:7497): avc: denied { search } for pid=24064 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366836.203:7497): arch=c000003e syscall=59 success=no exit=-13 a0=7fff693472ec a1=1cff5e0 a2=1d00090 a3=7fff69347120 items=0 ppid=24063 pid=24064 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.604:7498): avc: denied { search } for pid=24065 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366836.604:7498): arch=c000003e syscall=59 success=no exit=-13 a0=1d00130 a1=1cfc5b0 a2=1cfd320 a3=7fff693471f0 items=0 ppid=24060 pid=24065 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.604:7499): avc: denied { search } for pid=24066 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366836.604:7499): arch=c000003e syscall=59 success=no exit=-13 a0=7fff693473ac a1=1cff2d0 a2=1cfd320 a3=7fff693471f0 items=0 ppid=24060 pid=24066 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.605:7500): avc: denied { search } for pid=24065 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337366836.605:7500): arch=c000003e syscall=2 success=no exit=-13 a0=254b460 a1=0 a2=254b487 a3=28 items=0 ppid=24060 pid=24065 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337366836.608:7501): avc: denied { rlimitinh } for pid=24068 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366836.608:7501): avc: denied { siginh } for pid=24068 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337366836.608:7501): avc: denied { noatsecure } for pid=24068 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337366836.608:7501): arch=c000003e syscall=59 success=yes exit=0 a0=1d00130 a1=1cff680 a2=1cfd510 a3=7fff693471d0 items=0 ppid=24067 pid=24068 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337366836.618:7502): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337366836.618:7502): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337367064.288:7503): avc: denied { rlimitinh } for pid=24099 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367064.288:7503): avc: denied { siginh } for pid=24099 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367064.288:7503): avc: denied { noatsecure } for pid=24099 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337367064.288:7503): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24098 pid=24099 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.330:7504): avc: denied { search } for pid=24101 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367064.330:7504): arch=c000003e syscall=59 success=no exit=-13 a0=7fff821bb8fc a1=c505d0 a2=c52cd0 a3=7fff821bb730 items=0 ppid=24100 pid=24101 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.332:7505): avc: denied { search } for pid=24103 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367064.332:7505): arch=c000003e syscall=59 success=no exit=-13 a0=7fff821bb8fc a1=c53740 a2=c52cd0 a3=7fff821bb730 items=0 ppid=24102 pid=24103 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.861:7506): avc: denied { search } for pid=24104 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367064.861:7506): arch=c000003e syscall=59 success=no exit=-13 a0=c55cd0 a1=c505b0 a2=c52e40 a3=7fff821bb800 items=0 ppid=24099 pid=24104 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.861:7507): avc: denied { search } for pid=24105 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367064.861:7507): arch=c000003e syscall=59 success=no exit=-13 a0=7fff821bb9bc a1=c52c50 a2=c52e40 a3=7fff821bb800 items=0 ppid=24099 pid=24105 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.862:7508): avc: denied { search } for pid=24104 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367064.862:7508): arch=c000003e syscall=2 success=no exit=-13 a0=24a6460 a1=0 a2=24a6487 a3=28 items=0 ppid=24099 pid=24104 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367064.865:7509): avc: denied { rlimitinh } for pid=24107 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367064.865:7509): avc: denied { siginh } for pid=24107 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367064.865:7509): avc: denied { noatsecure } for pid=24107 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337367064.865:7509): arch=c000003e syscall=59 success=yes exit=0 a0=c55cd0 a1=c52990 a2=c530c0 a3=7fff821bb7e0 items=0 ppid=24106 pid=24107 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337367064.876:7510): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337367064.876:7510): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337367135.648:7511): avc: denied { rlimitinh } for pid=24120 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367135.648:7511): avc: denied { siginh } for pid=24120 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367135.648:7511): avc: denied { noatsecure } for pid=24120 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337367135.648:7511): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24119 pid=24120 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367135.651:7512): avc: denied { search } for pid=24122 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367135.651:7512): arch=c000003e syscall=59 success=no exit=-13 a0=7fff4c7d65ec a1=1f535d0 a2=1f57090 a3=7fff4c7d6420 items=0 ppid=24121 pid=24122 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367135.653:7513): avc: denied { search } for pid=24124 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367135.653:7513): arch=c000003e syscall=59 success=no exit=-13 a0=7fff4c7d65ec a1=1f565e0 a2=1f57090 a3=7fff4c7d6420 items=0 ppid=24123 pid=24124 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367136.027:7514): avc: denied { search } for pid=24125 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367136.027:7514): arch=c000003e syscall=59 success=no exit=-13 a0=1f57130 a1=1f535b0 a2=1f54320 a3=7fff4c7d64f0 items=0 ppid=24120 pid=24125 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367136.028:7515): avc: denied { search } for pid=24126 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367136.028:7515): arch=c000003e syscall=59 success=no exit=-13 a0=7fff4c7d66ac a1=1f562d0 a2=1f54320 a3=7fff4c7d64f0 items=0 ppid=24120 pid=24126 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367136.029:7516): avc: denied { search } for pid=24125 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367136.029:7516): arch=c000003e syscall=2 success=no exit=-13 a0=9fa460 a1=0 a2=9fa487 a3=28 items=0 ppid=24120 pid=24125 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367136.032:7517): avc: denied { rlimitinh } for pid=24128 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367136.032:7517): avc: denied { siginh } for pid=24128 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367136.032:7517): avc: denied { noatsecure } for pid=24128 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337367136.032:7517): arch=c000003e syscall=59 success=yes exit=0 a0=1f57130 a1=1f56680 a2=1f54510 a3=7fff4c7d64d0 items=0 ppid=24127 pid=24128 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337367136.042:7518): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337367136.042:7518): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) type=AVC msg=audit(1337367248.223:7519): avc: denied { rlimitinh } for pid=24153 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367248.223:7519): avc: denied { siginh } for pid=24153 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=AVC msg=audit(1337367248.223:7519): avc: denied { noatsecure } for pid=24153 comm="procmail" scontext=unconfined_u:system_r:sendmail_t:s0 tcontext=unconfined_u:system_r:procmail_t:s0 tclass=process type=SYSCALL msg=audit(1337367248.223:7519): arch=c000003e syscall=59 success=yes exit=0 a0=7ff6fcfbd0a0 a1=7fff95bb0fc0 a2=7ff6fc01e200 a3=7fff95bb0c30 items=0 ppid=24152 pid=24153 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.403:7520): avc: denied { search } for pid=24155 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367248.403:7520): arch=c000003e syscall=59 success=no exit=-13 a0=7fff1a57ab5c a1=22605d0 a2=2264690 a3=7fff1a57a990 items=0 ppid=24154 pid=24155 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.405:7521): avc: denied { search } for pid=24157 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367248.405:7521): arch=c000003e syscall=59 success=no exit=-13 a0=7fff1a57ab5c a1=2263460 a2=2264690 a3=7fff1a57a990 items=0 ppid=24156 pid=24157 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.667:7522): avc: denied { search } for pid=24158 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367248.667:7522): arch=c000003e syscall=59 success=no exit=-13 a0=2264730 a1=22605b0 a2=2261320 a3=7fff1a57aa60 items=0 ppid=24153 pid=24158 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.667:7523): avc: denied { search } for pid=24159 comm="procmail" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367248.667:7523): arch=c000003e syscall=59 success=no exit=-13 a0=7fff1a57ac1c a1=2264630 a2=2261320 a3=7fff1a57aa60 items=0 ppid=24153 pid=24159 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=12 fsgid=10002 tty=(none) ses=1 comm="procmail" exe="/usr/bin/procmail" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.668:7524): avc: denied { search } for pid=24158 comm="sh" name="bin" dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir type=SYSCALL msg=audit(1337367248.668:7524): arch=c000003e syscall=2 success=no exit=-13 a0=afa460 a1=0 a2=afa487 a3=28 items=0 ppid=24153 pid=24158 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="sh" exe="/bin/bash" subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(1337367248.671:7525): avc: denied { rlimitinh } for pid=24161 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367248.671:7525): avc: denied { siginh } for pid=24161 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=AVC msg=audit(1337367248.671:7525): avc: denied { noatsecure } for pid=24161 comm="spamc" scontext=unconfined_u:system_r:procmail_t:s0 tcontext=unconfined_u:system_r:spamc_t:s0 tclass=process type=SYSCALL msg=audit(1337367248.671:7525): arch=c000003e syscall=59 success=yes exit=0 a0=2264730 a1=22635a0 a2=22615a0 a3=7fff1a57aa40 items=0 ppid=24160 pid=24161 auid=0 uid=10002 gid=10002 euid=10002 suid=10002 fsuid=10002 egid=10002 sgid=10002 fsgid=10002 tty=(none) ses=1 comm="spamc" exe="/usr/bin/spamc" subj=unconfined_u:system_r:spamc_t:s0 key=(null) type=AVC msg=audit(1337367248.681:7526): avc: denied { read } for pid=19744 comm="spamd" name="shadow" dev=dm-1 ino=3501 scontext=system_u:system_r:spamd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file type=SYSCALL msg=audit(1337367248.681:7526): arch=c000003e syscall=2 success=no exit=-13 a0=7f664e41c6bb a1=80000 a2=1b6 a3=0 items=0 ppid=16793 pid=19744 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="spamd" exe="/usr/bin/perl" subj=system_u:system_r:spamd_t:s0 key=(null) -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Chuck Anderson 2012-05-18T19:03:13 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14205 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/17/2012 07:32 PM, Chuck Anderson wrote: Hey chuck, could you check to see if this is fixed by installing the 6.3 policy. Preview currently available at: people.redhat.com/dwalsh/SELinux/RHEL6 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+2XgUACgkQrlYvE4MpobNT9gCfYdkEQ/m0JDFQXouQdsX104w9 +qMAoMJuW4F19wHZvbPYmKyBlEPuB17Y =1f3c -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-18T14:34:45 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14204 <pre>I'm using EL 6.2 with sendmail &amp; procmail. I'm having trouble with calling custom scripts in my home directory from .procmailrc such as this recipe: ###################################################### # # BACKUP INCOMING MAIL # # Stores the last 16 messages in a backup folder. # "Just in Case" # # Create a folder in your $MAILDIR called "backup" # BEFORE you execute this procmail recipe. # :0 c backup :0 ic | /home/cra/bin/procmail-prune-backup-msg The script is labeled with home_bin_t: -rwxr-xr-x. cra cra system_u:object_r:home_bin_t:s0 /home/cra/bin/procmail-prune-backup-msg which is a Bourne Shell script similar to this: #!/bin/sh cd /home/cra/mail/backup /bin/ls -t | /bin/grep ^msg\. | /bin/sed -e 1,256d | /usr/bin/xargs -n 256 /bin/rm -f In my procmail log I get: /bin/sh: /home/cra/bin/procmail-prune-backup-msg: Permission denied It works if I "setenforce 0". With Enforcing, here is the AVC I get (after enabling dontaudit rules with semodule -DB): # ausearch -i -m AVC type=SYSCALL msg=audit(05/17/2012 19:17:15.773:273) : arch=x86_64 syscall=open success=no exit=-13(Permission denied) a0=1c8d460 a1=0 a2=1c8d487 a3=28 items=0 ppid=5252 pid=5257 auid=root uid=cra gid=cra euid=cra suid=cra fsuid=cra egid=cra sgid=cra fsgid=cra tty=(none) ses=1 comm=sh exe=/bin/bash subj=unconfined_u:system_r:procmail_t:s0 key=(null) type=AVC msg=audit(05/17/2012 19:17:15.773:273) : avc: denied { search } for pid=5257 comm=sh name=bin dev=dm-10 ino=2760827 scontext=unconfined_u:system_r:procmail_t:s0 tcontext=user_u:object_r:home_bin_t:s0 tclass=dir I did a bunch of research on this and found this old changelog entry and the discussions/bugzillas leading up to it: #rpm -q selinux-policy selinux-policy-3.7.19-126.el6_2.10.noarch #rpm -q --changelog selinux-policy ... * Tue May 25 2010 Dan Walsh &lt;dwalsh&lt; at &gt;redhat.com&gt; 3.7.19-22 - Allow procmail to execute scripts in the users home dir that are labeled home_bin_t - Fix /var/run/abrtd.lock label Was there a recent regression that broke this functionality or did it not really make it into Enterprise Linux despite this changelog? Any ideas on how to fix this cleanly without having to disable Enforcing mode? Thanks. -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Chuck Anderson 2012-05-17T23:32:21 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14203 <pre>So execute # semodule -DB re-test it # ausearch -m avc -ts recent # semodule -B Also we will need to add labeling for the check_dhcpd_pools plugin. -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Miroslav Grepl 2012-05-16T16:38:18 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14202 <pre>"Miroslav Grepl wrote:" Did some rechecking after setting the sebool for mysql and getting an application update. No longer see the issues here. -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> David Highley 2012-05-15T12:56:52 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14201 <pre>Run semodule -DB to build a policy database without the dontaudit rules. Run semodule -B to build a policy database (with the dontaudit rules included) On Tue, 2012-05-15 at 11:37 +0100, Jonathan Gazeley wrote: -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Dominick Grift 2012-05-15T12:09:36 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14200 <pre>I'm trying to debug a Nagios plugin that isn't playing nicely with SELinux. It executes a system binary to get statistics about DHCP pool usage, and obviously SELinux stamps on that access and the plugin only returns partial data. In Permissive mode the plugin works, it Enforcing it doesn't. But in neither mode are there any debug messages in audit.log [jg4461&lt; at &gt;dhcp1 ~]$ sudo setenforce 0 [jg4461&lt; at &gt;dhcp1 ~]$ /usr/lib64/nagios/plugins/check_nrpe -H localhost -c check_dhcpd_pools OK - all pools less than 80% full | MAYHEM! rnw-652=45.491%;80;90, rnw-653=47.619%;80;90, rnw-654=51.570%;80;90, rnw-655=45.998%;80;90, rnw-656=49.949%;80;90, rnw-657=48.126%;80;90, rnw-658=45.390%;80;90, rnw-659=0.101%;80;90, rnw-ratelimited-660=0.811%;80;90, rnw-onlinepayment-661=0.507%;80;90, rnw-onlinepayment-662=0.304%;80;90, rnw-onlinepayment-663=0.405%;80;90, rnw-consoles-665=1.317%;80;90, rnw-message-666=0.101%;80;90, rnw-instructions-667=9.411%;80;90 [jg4461&lt; at &gt;dhcp1 ~]$ sudo setenforce 1 [jg4461&lt; at &gt;dhcp1 ~]$ /usr/lib64/nagios/plugins/check_nrpe -H localhost -c check_dhcpd_pools OK - all pools less than 80% full | Regardless of the SELinux mode, the same 3 log lines are printed in audit.log: type=USER_CMD msg=audit(1337077807.188:273642): user pid=1593 uid=0 auid=56933 ses=12137 subj=unconfined_u:system_r:nrpe_t:s0 msg='cwd="/" cmd="/usr/lib64/nagios/plugins/check_dhcpd_pools" terminal=? res=success' type=CRED_ACQ msg=audit(1337077807.191:273643): user pid=1594 uid=0 auid=56933 ses=12137 subj=unconfined_u:system_r:nrpe_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1337077807.191:273644): user pid=1594 uid=0 auid=56933 ses=12137 subj=unconfined_u:system_r:nrpe_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Anyone have any idea how I can see the deny messages and make a policy from them? Cheers, Jonathan -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Jonathan Gazeley 2012-05-15T10:37:24 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14199 <pre>Open a new bug please. Thank you. -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Miroslav Grepl 2012-05-09T17:24:23 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14198 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/09/2012 10:17 AM, Tim Sheppard wrote: Yes this is theoretically possible. The problem is certain domains when run in as an Evil Admin would be able to break out. For example if you only allow the packagemaintainer to run rpm, then he will need to transition to rpm_t which is basically unconfined. He could then write a simple rpm to disable SELinux and install it. Game over. Google "confined admin site:danwalsh.livejournal.com" You will find lots of blog posts on how to do this. We ship a webadm_r and logadm_r now. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+qgOAACgkQrlYvE4MpobOIjQCggx23Svk/knouooCDXvk6KKOE Q6MAn3+nMKyCpPCyotERi7UJn3tVTnre =KUi0 -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-09T14:36:16 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14197 <pre>Hi, I was wondering if it is possible to create a number of admin roles, each with limited access to specified admin features, e.g. package management only, NIC / Firewall management only, policy management only etc and to effectively completely remove the root account as a system wide administrator using selinux? I have seen mention of Kiosk Users and the SELinux play machine (sadly my corporate network does not allow global ssh access) so I believe this is entirely possible, but am not entirely sure of the best resources to delve into so any pointers would be very welcome. Many Thanks, Tim This email and any attachments to it may be confidential and are intended solely for the use of the individual to whom it is addressed. If you are not the intended recipient of this email, you must neither take any action based upon its contents, nor copy or show it to anyone. Please contact the sender if you believe you have received this email in error. QinetiQ may monitor email traffic data and also the content of email for the purposes of security. QinetiQ Limited (Registered in England &amp; Wales: Company Number: 3796233) Registered office: Cody Technology Park, Ively Road, Farnborough, Hampshire, GU14 0LX http://www.qinetiq.com. -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Tim Sheppard 2012-05-09T14:17:57 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14196 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/07/2012 03:12 PM, Mark Dalton wrote: Turn off the dontaudit rules and then send me the log compressed. # semodule -DB # reboot # ausearch -m avc -i -ts recent | gzip -c &gt; /tmp/audit.log.tgz # semodule -B -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oJksACgkQrlYvE4MpobNOlACg2bPaENSryRcGZG+Dhe9UikDm GjEAoNYt1ys5o9Ysd/65KaMp3+X/Nui5 =21rr -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-07T19:45:15 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14195 <pre> I did not see anything obviously useful to me.. The attachment also had some information. My goal is to find a way to keep selinux enabled and run VirtualGL. Thank you for your quick response. Mark First boot: [root&lt; at &gt;amelie log]# ausearch -m avc -ts recent ---- time-&gt;Mon May 7 14:54:57 2012 type=SYSCALL msg=audit(1336416897.225:118): arch=c000003e syscall=59 success=yes exit=0 a0=1f0d870 a1=1f0d5a0 a2=1f0c5e0 a3=10 items=0 ppid=1981 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336416897.225:118): avc: denied { read write } for pid=1982 comm="portreserve" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:portreserve_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file ---- time-&gt;Mon May 7 14:54:57 2012 type=SYSCALL msg=audit(1336416897.230:120): arch=c000003e syscall=47 success=yes exit=17 a0=4 a1=7fff41541fb0 a2=40000000 a3=4000 items=0 ppid=1 pid=1983 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336416897.230:120): avc: denied { read } for pid=1983 comm="portreserve" path="/var/db/nscd/services" dev=dm-0 ino=1183821 scontext=system_u:system_r:portreserve_t:s0 tcontext=unconfined_u:object_r:nscd_var_run_t:s0 tclass=file ---- time-&gt;Mon May 7 14:54:57 2012 type=SYSCALL msg=audit(1336416897.251:122): arch=c000003e syscall=59 success=yes exit=0 a0=b3b790 a1=b3b7d0 a2=b3a5e0 a3=10 items=0 ppid=1989 pid=1990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="irqbalance" exe="/usr/sbin/irqbalance" subj=system_u:system_r:irqbalance_t:s0 key=(null) type=AVC msg=audit(1336416897.251:122): avc: denied { read } for pid=1990 comm="irqbalance" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.640:148): arch=c000003e syscall=59 success=yes exit=0 a0=def870 a1=def5a0 a2=dee5e0 a3=10 items=0 ppid=30418 pid=30419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336417372.640:148): avc: denied { read write } for pid=30419 comm="portreserve" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:portreserve_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.647:149): arch=c000003e syscall=47 success=yes exit=17 a0=4 a1=7fffdda478b0 a2=40000000 a3=4000 items=0 ppid=1 pid=30420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336417372.647:149): avc: denied { read } for pid=30420 comm="portreserve" path="/var/db/nscd/services" dev=dm-0 ino=1183821 scontext=system_u:system_r:portreserve_t:s0 tcontext=unconfined_u:object_r:nscd_var_run_t:s0 tclass=file ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.666:150): arch=c000003e syscall=59 success=yes exit=0 a0=17c2790 a1=17c27d0 a2=17c15e0 a3=10 items=0 ppid=30426 pid=30427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="irqbalance" exe="/usr/sbin/irqbalance" subj=system_u:system_r:irqbalance_t:s0 key=(null) type=AVC msg=audit(1336417372.666:150): avc: denied { read } for pid=30427 comm="irqbalance" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file Second boot and test: [root&lt; at &gt;amelie mdalton]# ausearch -m avc -ts recent ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.640:148): arch=c000003e syscall=59 success=yes exit=0 a0=def870 a1=def5a0 a2=dee5e0 a3=10 items=0 ppid=30418 pid=30419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336417372.640:148): avc: denied { read write } for pid=30419 comm="portreserve" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:portreserve_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.647:149): arch=c000003e syscall=47 success=yes exit=17 a0=4 a1=7fffdda478b0 a2=40000000 a3=4000 items=0 ppid=1 pid=30420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="portreserve" exe="/sbin/portreserve" subj=system_u:system_r:portreserve_t:s0 key=(null) type=AVC msg=audit(1336417372.647:149): avc: denied { read } for pid=30420 comm="portreserve" path="/var/db/nscd/services" dev=dm-0 ino=1183821 scontext=system_u:system_r:portreserve_t:s0 tcontext=unconfined_u:object_r:nscd_var_run_t:s0 tclass=file ---- time-&gt;Mon May 7 15:02:52 2012 type=SYSCALL msg=audit(1336417372.666:150): arch=c000003e syscall=59 success=yes exit=0 a0=17c2790 a1=17c27d0 a2=17c15e0 a3=10 items=0 ppid=30426 pid=30427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="irqbalance" exe="/usr/sbin/irqbalance" subj=system_u:system_r:irqbalance_t:s0 key=(null) type=AVC msg=audit(1336417372.666:150): avc: denied { read } for pid=30427 comm="irqbalance" path="/dev/console" dev=devtmpfs ino=5164 scontext=system_u:system_r:irqbalance_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Mark Dalton 2012-05-07T19:12:57 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14194 <pre>-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 05/07/2012 02:29 PM, Mark Dalton wrote: Can you boot in permissive mode? What avc messages are you seeing? ausearch -m avc -ts recent -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+oFS4ACgkQrlYvE4MpobMklgCfeLpmGmqt14kHw7AdU3X1z6pj DLwAn2syj9BkDDaY2IjSF2WbPurW+tGZ =jGq8 -----END PGP SIGNATURE----- -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Daniel J Walsh 2012-05-07T18:32:14 http://permalink.gmane.org/gmane.linux.redhat.fedora.selinux/14193 <pre>I was not able to get VirtualGL and selinux to work together. It is something during boot time it seems. I have tried generating rules based on audit/audit.log. The VirtualGL web http://www.virtualgl.org/Documentation/RHEL6 states they don't know how to make it work either. I have tried in permissive mode after boot and that did not work either, which is why I think it is something during boot time. Like the device setup. My guess is related to: /dev/dri as it sets up these and then access to the /dev/nvidia0 and /dev/nvidiactl are restricted to vglusers group (in my case it can be configured with/without group restriction). From VirtualGL website they also have: vglgenkey Issues Currently, the only known way to make|vglgenkey|work (|vglgenkey|is used to grant 3D X Server access to members of the|vglusers|group) is to disable SELinux. With SELinux enabled, the*//usr/bin/xauth/*file is hidden within the context of the GDM startup scripts, so|vglgenkey|has no way of generating or importing an xauth key to*//etc/opt/VirtualGL/vgl_xauth_key/*(and, for that matter, access is denied to*//etc/opt/VirtualGL/*as well.) Perhaps someone with a greater knowledge of SELinux can explain how to disable enforcement only for GDM and not the whole system. I had reinstalled that previous machine and don't have the other rules I applied. I repeated this on another machine, and did not run any audit2allow. Also there are 2 problems: 1. Boot time problem with the VirtualGL which seems to generate a avc message. (Fails if the machine is not booted in permissive or disabled mode) 2. A problem with xauth when setenforce is enforcing. (This works if setenforce is permissive or disabled regardless of the boot time settings). The machine policy is set to targeted. Attached is the longer data with strace. The xauth does not seem to generate any audit.log messages even with semodule -DB, but if I turn selinux to permissive the xauth commands succeed. To clarify: - It works if the system is booted with /etc/selinux/config SELINUX=permissive or SELINUX=disable - It fails if the system is booted with /etc/selinux/config SELINUX=enforcing * Even if after the boot 'setenforce 0' is run - My I do get avc message, note this is running in permissive mode. [root&lt; at &gt;amelie mdalton]# grep -i avc /var/log/audit/audit.log type=USER_AVC msg=audit(1331199802.711:70545): user pid=4970 uid=28 auid=0 ses=3756 subj=system_u:system_r:nscd_t:s0 msg='avc: received policyload notice (seqno=4) : exe="?" sauid=28 hostname=? addr=? terminal=?' [root&lt; at &gt;amelie mdalton]# ls -Z /dev/dri /dev/nvidia* ls: cannot access /dev/dri: No such file or directory crw-rw----. root vglusers system_u:object_r:device_t:s0 /dev/nvidia0 crw-rw----. root vglusers system_u:object_r:device_t:s0 /dev/nvidiactl Mark I did not see any messages in the /var/log/audit/audit.log when running xauth even with semodule -DB. [root&lt; at &gt;mymachine ~]# ls -Z /home/myuser/.Xauthority -rw-------. myuser cses unconfined_u:object_r:xauth_home_t:s0 /home/myuser/.Xauthority [root&lt; at &gt;mymachine ~]# semodule -DB [root&lt; at &gt;mymachine ~]# strace xauth -f /etc/opt/VirtualGL/vgl_xauth_key generate :0.0 . trusted timeout 0 execve("/usr/bin/xauth", ["xauth", "-f", "/etc/opt/VirtualGL/vgl_xauth_key", "generate", ":0.0", ".", "trusted", "timeout", "0"], [/* 33 vars */]) = 0 brk(0) = 0x1a40000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd82000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=161072, ...}) = 0 mmap(NULL, 161072, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f696bd5a000 close(3) = 0 open("/usr/lib64/libXau.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\320\r`\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=13168, ...}) = 0 mmap(0x37fc600000, 2106112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc600000 mprotect(0x37fc602000, 2097152, PROT_NONE) = 0 mmap(0x37fc802000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fc802000 close(3) = 0 open("/usr/lib64/libXext.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\2005\240\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=76848, ...}) = 0 mmap(0x37fca00000, 2170120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fca00000 mprotect(0x37fca11000, 2097152, PROT_NONE) = 0 mmap(0x37fcc11000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x37fcc11000 close(3) = 0 open("/usr/lib64/libXmuu.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\22 \3727\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=16400, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd59000 mmap(0x37fa200000, 2109200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fa200000 mprotect(0x37fa203000, 2093056, PROT_NONE) = 0 mmap(0x37fa402000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa402000 close(3) = 0 open("/usr/lib64/libX11.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\200\335\341\3737\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1308600, ...}) = 0 mmap(0x37fbe00000, 3403160, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fbe00000 mprotect(0x37fbf39000, 2097152, PROT_NONE) = 0 mmap(0x37fc139000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x139000) = 0x37fc139000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\355a\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1908792, ...}) = 0 mmap(0x37f9600000, 3733672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9600000 mprotect(0x37f9786000, 2097152, PROT_NONE) = 0 mmap(0x37f9986000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x186000) = 0x37f9986000 mmap(0x37f998b000, 18600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x37f998b000 close(3) = 0 open("/usr/lib64/libxcb.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0P\206 \3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=112760, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd58000 mmap(0x37fc200000, 2205608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc200000 mprotect(0x37fc21b000, 2093056, PROT_NONE) = 0 mmap(0x37fc41a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x37fc41a000 close(3) = 0 open("/lib64/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\340\r\340\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0 mmap(0x37f9e00000, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9e00000 mprotect(0x37f9e02000, 2097152, PROT_NONE) = 0 mmap(0x37fa002000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa002000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd57000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd56000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f696bd55000 arch_prctl(ARCH_SET_FS, 0x7f696bd56700) = 0 mprotect(0x37f9986000, 16384, PROT_READ) = 0 mprotect(0x37fa002000, 4096, PROT_READ) = 0 mprotect(0x37f941f000, 4096, PROT_READ) = 0 munmap(0x7f696bd5a000, 161072) = 0 rt_sigaction(SIGINT, {0x403f40, [INT], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTERM, {0x403f40, [TERM], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGHUP, {0x403f40, [HUP], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {0x403f40, [PIPE], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 stat("/etc/opt/VirtualGL/vgl_xauth_key-c", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EEXIST (File exists) write(2, "xauth: error in locking authori"..., 73xauth: error in locking authority file /etc/opt/VirtualGL/vgl_xauth_key ) = 73 exit_group(1) = ? [root&lt; at &gt;mymachine ~]# rm /etc/opt/VirtualGL/vgl_xauth_key-c rm: remove regular empty file `/etc/opt/VirtualGL/vgl_xauth_key-c'? y [root&lt; at &gt;mymachine ~]# strace xauth -vvv -f /etc/opt/VirtualGL/vgl_xauth_key generate :0.0 . trusted timeout 0 execve("/usr/bin/xauth", ["xauth", "-vvv", "-f", "/etc/opt/VirtualGL/vgl_xauth_key", "generate", ":0.0", ".", "trusted", "timeout", "0"], [/* 33 vars */]) = 0 brk(0) = 0x12cc000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13dc000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=161072, ...}) = 0 mmap(NULL, 161072, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f80b13b4000 close(3) = 0 open("/usr/lib64/libXau.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\320\r`\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=13168, ...}) = 0 mmap(0x37fc600000, 2106112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc600000 mprotect(0x37fc602000, 2097152, PROT_NONE) = 0 mmap(0x37fc802000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fc802000 close(3) = 0 open("/usr/lib64/libXext.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\2005\240\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=76848, ...}) = 0 mmap(0x37fca00000, 2170120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fca00000 mprotect(0x37fca11000, 2097152, PROT_NONE) = 0 mmap(0x37fcc11000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x37fcc11000 close(3) = 0 open("/usr/lib64/libXmuu.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\22 \3727\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=16400, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13b3000 mmap(0x37fa200000, 2109200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fa200000 mprotect(0x37fa203000, 2093056, PROT_NONE) = 0 mmap(0x37fa402000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa402000 close(3) = 0 open("/usr/lib64/libX11.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\200\335\341\3737\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1308600, ...}) = 0 mmap(0x37fbe00000, 3403160, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fbe00000 mprotect(0x37fbf39000, 2097152, PROT_NONE) = 0 mmap(0x37fc139000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x139000) = 0x37fc139000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\355a\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1908792, ...}) = 0 mmap(0x37f9600000, 3733672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9600000 mprotect(0x37f9786000, 2097152, PROT_NONE) = 0 mmap(0x37f9986000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x186000) = 0x37f9986000 mmap(0x37f998b000, 18600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x37f998b000 close(3) = 0 open("/usr/lib64/libxcb.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0P\206 \3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=112760, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13b2000 mmap(0x37fc200000, 2205608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc200000 mprotect(0x37fc21b000, 2093056, PROT_NONE) = 0 mmap(0x37fc41a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x37fc41a000 close(3) = 0 open("/lib64/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\340\r\340\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0 mmap(0x37f9e00000, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9e00000 mprotect(0x37f9e02000, 2097152, PROT_NONE) = 0 mmap(0x37fa002000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa002000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13b1000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13b0000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f80b13af000 arch_prctl(ARCH_SET_FS, 0x7f80b13b0700) = 0 mprotect(0x37f9986000, 16384, PROT_READ) = 0 mprotect(0x37fa002000, 4096, PROT_READ) = 0 mprotect(0x37f941f000, 4096, PROT_READ) = 0 munmap(0x7f80b13b4000, 161072) = 0 rt_sigaction(SIGINT, {0x403f40, [INT], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTERM, {0x403f40, [TERM], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGHUP, {0x403f40, [HUP], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {0x403f40, [PIPE], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 stat("/etc/opt/VirtualGL/vgl_xauth_key-c", 0x7fff3f1050a0) = -1 ENOENT (No such file or directory) open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = -1 EACCES (Permission denied) rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 nanosleep({2, 0}, 0x7fff3f105060) = 0 write(2, "xauth: timeout in locking autho"..., 75xauth: timeout in locking authority file /etc/opt/VirtualGL/vgl_xauth_key ) = 75 exit_group(1) = ? [root&lt; at &gt;mymachine ~]# sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: enforcing Mode from config file: enforcing Policy version: 24 Policy from config file: targeted [root&lt; at &gt;mymachine ~]# setenforce permissive [root&lt; at &gt;mymachine ~]# strace xauth -vvv -f /etc/opt/VirtualGL/vgl_xauth_key generate :0.0 . trusted timeout 0 execve("/usr/bin/xauth", ["xauth", "-vvv", "-f", "/etc/opt/VirtualGL/vgl_xauth_key", "generate", ":0.0", ".", "trusted", "timeout", "0"], [/* 33 vars */]) = 0 brk(0) = 0x1fc1000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9067658000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=161072, ...}) = 0 mmap(NULL, 161072, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f9067630000 close(3) = 0 open("/usr/lib64/libXau.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\320\r`\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=13168, ...}) = 0 mmap(0x37fc600000, 2106112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc600000 mprotect(0x37fc602000, 2097152, PROT_NONE) = 0 mmap(0x37fc802000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fc802000 close(3) = 0 open("/usr/lib64/libXext.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\2005\240\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=76848, ...}) = 0 mmap(0x37fca00000, 2170120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fca00000 mprotect(0x37fca11000, 2097152, PROT_NONE) = 0 mmap(0x37fcc11000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x37fcc11000 close(3) = 0 open("/usr/lib64/libXmuu.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\22 \3727\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=16400, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f906762f000 mmap(0x37fa200000, 2109200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fa200000 mprotect(0x37fa203000, 2093056, PROT_NONE) = 0 mmap(0x37fa402000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa402000 close(3) = 0 open("/usr/lib64/libX11.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\200\335\341\3737\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1308600, ...}) = 0 mmap(0x37fbe00000, 3403160, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fbe00000 mprotect(0x37fbf39000, 2097152, PROT_NONE) = 0 mmap(0x37fc139000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x139000) = 0x37fc139000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\355a\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1908792, ...}) = 0 mmap(0x37f9600000, 3733672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9600000 mprotect(0x37f9786000, 2097152, PROT_NONE) = 0 mmap(0x37f9986000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x186000) = 0x37f9986000 mmap(0x37f998b000, 18600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x37f998b000 close(3) = 0 open("/usr/lib64/libxcb.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0P\206 \3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=112760, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f906762e000 mmap(0x37fc200000, 2205608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc200000 mprotect(0x37fc21b000, 2093056, PROT_NONE) = 0 mmap(0x37fc41a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x37fc41a000 close(3) = 0 open("/lib64/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\340\r\340\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0 mmap(0x37f9e00000, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9e00000 mprotect(0x37f9e02000, 2097152, PROT_NONE) = 0 mmap(0x37fa002000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa002000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f906762d000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f906762c000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f906762b000 arch_prctl(ARCH_SET_FS, 0x7f906762c700) = 0 mprotect(0x37f9986000, 16384, PROT_READ) = 0 mprotect(0x37fa002000, 4096, PROT_READ) = 0 mprotect(0x37f941f000, 4096, PROT_READ) = 0 munmap(0x7f9067630000, 161072) = 0 rt_sigaction(SIGINT, {0x403f40, [INT], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTERM, {0x403f40, [TERM], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGHUP, {0x403f40, [HUP], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {0x403f40, [PIPE], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 stat("/etc/opt/VirtualGL/vgl_xauth_key-c", 0x7fff037ae1e0) = -1 ENOENT (No such file or directory) open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = 3 close(3) = 0 statfs("/etc/opt/VirtualGL/vgl_xauth_key-c", {f_type="EXT2_SUPER_MAGIC", f_bsize=4096, f_blocks=37797427, f_bfree=22169622, f_bavail=20249622, f_files=9601024, f_ffree=9018205, f_fsid={1618940619, -282490467}, f_namelen=255, f_frsize=4096}) = 0 link("/etc/opt/VirtualGL/vgl_xauth_key-c", "/etc/opt/VirtualGL/vgl_xauth_key-l") = 0 access("/etc/opt/VirtualGL/vgl_xauth_key", F_OK) = -1 ENOENT (No such file or directory) umask(077) = 022 brk(0) = 0x1fc1000 brk(0x1fe2000) = 0x1fe2000 open("/etc/opt/VirtualGL/vgl_xauth_key", O_RDONLY) = -1 ENOENT (No such file or directory) access("/etc/opt/VirtualGL/vgl_xauth_key", F_OK) = -1 ENOENT (No such file or directory) write(2, "xauth: creating new authority f"..., 69xauth: creating new authority file /etc/opt/VirtualGL/vgl_xauth_key ) = 69 fstat(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 3), ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9067657000 write(1, "Using authority file /etc/opt/Vi"..., 54Using authority file /etc/opt/VirtualGL/vgl_xauth_key ) = 54 socket(PF_FILE, SOCK_STREAM, 0) = 3 connect(3, {sa_family=AF_FILE, path=&lt; at &gt;"/tmp/.X11-unix/X0"}, 20) = 0 getpeername(3, {sa_family=AF_FILE, path=&lt; at &gt;"/tmp/.X11-unix/X0"}, [20]) = 0 uname({sys="Linux", node="mymachine.domain.org", ...}) = 0 access("/var/run/gdm/auth-for-myuser-8uJHLe/database", R_OK) = 0 open("/var/run/gdm/auth-for-myuser-8uJHLe/database", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|0600, st_size=65, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f9067656000 read(4, "\1\0\0\24mymachine.domain.org\0\0010\0\22MIT"..., 4096) = 65 close(4) = 0 munmap(0x7f9067656000, 4096) = 0 getsockname(3, {sa_family=AF_FILE, NULL}, [2]) = 0 fcntl(3, F_GETFL) = 0x2 (flags O_RDWR) fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0 fcntl(3, F_SETFD, FD_CLOEXEC) = 0 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"l\0\v\0\0\0\22\0\20\0\0\0", 12}, {"", 0}, {"MIT-MAGIC-COOKIE-1", 18}, {"\0\0", 2}, {"\5\342\233\2637\16\266\371\366\21\307\210z&lt;Bz", 16}, {"", 0}], 6) = 48 read(3, 0x1fc75b0, 8) = -1 EAGAIN (Resource temporarily unavailable) poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\0\v\0\0\0\2\3", 8) = 8 read(3, "`\350\247\0\0\0&lt; at &gt;\3\377\377\37\0\0\1\0\0\r\0\377\377\1\7\0\0 \10\377\0\0\0\0"..., 3080) = 3080 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"b\0\5\0\f\0\0\0BIG-REQUESTS", 20}], 1) = 20 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\0\1\0\0\0\0\0\1\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 4096) = 32 poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"\222\0\1\0", 4}], 1) = 4 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\0\2\0\0\0\0\0\377\377?\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 4096) = 32 read(3, 0x1fc2414, 4096) = -1 EAGAIN (Resource temporarily unavailable) poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"7\0\5\0\0\0&lt; at &gt;\3\255\1\0\0\10\0\0\0\377\377\377\0\24\0\6\0\255\1\0\0\27\0\0\0"..., 44}, {NULL, 0}, {"", 0}], 3) = 44 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\10\4\0(\0\0\0\37\0\0\0\0\0\0\0\237\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096) = 192 read(3, 0x1fc2414, 4096) = -1 EAGAIN (Resource temporarily unavailable) poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"b\0\5\0\t\0&lt; at &gt;\3", 8}, {"XKEYBOARD", 9}, {"\0\0\0", 3}], 3) = 20 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\0\5\0\0\0\0\0\1\224w\253\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 4096) = 32 read(3, 0x1fc2414, 4096) = -1 EAGAIN (Resource temporarily unavailable) poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"\224\0\2\0\1\0\0\0", 8}, {NULL, 0}, {"", 0}], 3) = 8 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\1\6\0\0\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 4096) = 32 read(3, 0x1fc2414, 4096) = -1 EAGAIN (Resource temporarily unavailable) poll([{fd=3, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=3, revents=POLLOUT}]) writev(3, [{"b\0\4\0\10\0\0\0", 8}, {"SECURITY", 8}, {"", 0}], 3) = 16 poll([{fd=3, events=POLLIN}], 1, -1) = 1 ([{fd=3, revents=POLLIN}]) read(3, "\1\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 4096) = 32 read(3, 0x1fc2414, 4096) = -1 EAGAIN (Resource temporarily unavailable) write(2, "xauth: (argv):1: ", 18xauth: (argv):1: ) = 18 write(2, "couldn't query Security extensio"..., 52couldn't query Security extension on display ":0.0" ) = 52 unlink("/etc/opt/VirtualGL/vgl_xauth_key-c") = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key-l") = 0 umask(022) = 077 exit_group(1) = ? [root&lt; at &gt;mymachine ~]# semodule -B And normally this is what vglgenkey would do, it is a script that calls xauth, this is the script with -x and strace of the second xauth. [root&lt; at &gt;mymachine myuser]# vglgenkey + XAUTH=xauth + '[' -x /usr/X11R6/bin/xauth ']' + '[' -x /usr/openwin/bin/xauth ']' + '[' '!' -d /etc/opt/VirtualGL ']' + '[' -f /etc/opt/VirtualGL/vgl_xauth_key ']' + rm /etc/opt/VirtualGL/vgl_xauth_key + xauth -f /etc/opt/VirtualGL/vgl_xauth_key generate :0.0 . trusted timeout 0 xauth: creating new authority file /etc/opt/VirtualGL/vgl_xauth_key xauth: (argv):1: couldn't query Security extension on display ":0.0" ++ xauth list ++ awk '{print $3}' + strace xauth -f /etc/opt/VirtualGL/vgl_xauth_key add :0.0 . 05e29bb3370eb6f9f611c7887a3c427a execve("/usr/bin/xauth", ["xauth", "-f", "/etc/opt/VirtualGL/vgl_xauth_key", "add", ":0.0", ".", "05e29bb3370eb6f9f611c7887a3c427a"], [/* 32 vars */]) = 0 brk(0) = 0xbd5000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4e21000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=161072, ...}) = 0 mmap(NULL, 161072, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f30a4df9000 close(3) = 0 open("/usr/lib64/libXau.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\320\r`\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=13168, ...}) = 0 mmap(0x37fc600000, 2106112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc600000 mprotect(0x37fc602000, 2097152, PROT_NONE) = 0 mmap(0x37fc802000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fc802000 close(3) = 0 open("/usr/lib64/libXext.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\2005\240\3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=76848, ...}) = 0 mmap(0x37fca00000, 2170120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fca00000 mprotect(0x37fca11000, 2097152, PROT_NONE) = 0 mmap(0x37fcc11000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x11000) = 0x37fcc11000 close(3) = 0 open("/usr/lib64/libXmuu.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\22 \3727\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=16400, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4df8000 mmap(0x37fa200000, 2109200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fa200000 mprotect(0x37fa203000, 2093056, PROT_NONE) = 0 mmap(0x37fa402000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa402000 close(3) = 0 open("/usr/lib64/libX11.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\200\335\341\3737\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1308600, ...}) = 0 mmap(0x37fbe00000, 3403160, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fbe00000 mprotect(0x37fbf39000, 2097152, PROT_NONE) = 0 mmap(0x37fc139000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x139000) = 0x37fc139000 close(3) = 0 open("/lib64/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\360\355a\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1908792, ...}) = 0 mmap(0x37f9600000, 3733672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9600000 mprotect(0x37f9786000, 2097152, PROT_NONE) = 0 mmap(0x37f9986000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x186000) = 0x37f9986000 mmap(0x37f998b000, 18600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x37f998b000 close(3) = 0 open("/usr/lib64/libxcb.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0P\206 \3747\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=112760, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4df7000 mmap(0x37fc200000, 2205608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37fc200000 mprotect(0x37fc21b000, 2093056, PROT_NONE) = 0 mmap(0x37fc41a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1a000) = 0x37fc41a000 close(3) = 0 open("/lib64/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0&gt;\0\1\0\0\0\340\r\340\3717\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0 mmap(0x37f9e00000, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x37f9e00000 mprotect(0x37f9e02000, 2097152, PROT_NONE) = 0 mmap(0x37fa002000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x37fa002000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4df6000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4df5000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4df4000 arch_prctl(ARCH_SET_FS, 0x7f30a4df5700) = 0 mprotect(0x37f9986000, 16384, PROT_READ) = 0 mprotect(0x37fa002000, 4096, PROT_READ) = 0 mprotect(0x37f941f000, 4096, PROT_READ) = 0 munmap(0x7f30a4df9000, 161072) = 0 rt_sigaction(SIGINT, {0x403f40, [INT], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTERM, {0x403f40, [TERM], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGHUP, {0x403f40, [HUP], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {0x403f40, [PIPE], SA_RESTORER|SA_RESTART, 0x37f9632900}, {SIG_DFL, [], 0}, 8) = 0 stat("/etc/opt/VirtualGL/vgl_xauth_key-c", 0x7fffc2278980) = -1 ENOENT (No such file or directory) open("/etc/opt/VirtualGL/vgl_xauth_key-c", O_WRONLY|O_CREAT|O_EXCL, 0600) = 3 close(3) = 0 statfs("/etc/opt/VirtualGL/vgl_xauth_key-c", {f_type="EXT2_SUPER_MAGIC", f_bsize=4096, f_blocks=37797427, f_bfree=22169618, f_bavail=20249618, f_files=9601024, f_ffree=9018201, f_fsid={1618940619, -282490467}, f_namelen=255, f_frsize=4096}) = 0 link("/etc/opt/VirtualGL/vgl_xauth_key-c", "/etc/opt/VirtualGL/vgl_xauth_key-l") = 0 access("/etc/opt/VirtualGL/vgl_xauth_key", F_OK) = -1 ENOENT (No such file or directory) umask(077) = 022 brk(0) = 0xbd5000 brk(0xbf6000) = 0xbf6000 open("/etc/opt/VirtualGL/vgl_xauth_key", O_RDONLY) = -1 ENOENT (No such file or directory) access("/etc/opt/VirtualGL/vgl_xauth_key", F_OK) = -1 ENOENT (No such file or directory) write(2, "xauth: creating new authority f"..., 69xauth: creating new authority file /etc/opt/VirtualGL/vgl_xauth_key ) = 69 uname({sys="Linux", node="mymachine.domain.org", ...}) = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key-n") = -1 ENOENT (No such file or directory) open("/etc/opt/VirtualGL/vgl_xauth_key-n", O_WRONLY|O_CREAT|O_EXCL, 0600) = 3 fcntl(3, F_GETFL) = 0x8001 (flags O_WRONLY|O_LARGEFILE) fstat(3, {st_mode=S_IFREG|0600, st_size=0, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f30a4e20000 lseek(3, 0, SEEK_CUR) = 0 write(3, "\1\0\0\24mymachine.domain.org\0\0010\0\22MIT"..., 65) = 65 close(3) = 0 munmap(0x7f30a4e20000, 4096) = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key") = -1 ENOENT (No such file or directory) link("/etc/opt/VirtualGL/vgl_xauth_key-n", "/etc/opt/VirtualGL/vgl_xauth_key") = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key-n") = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key-c") = 0 unlink("/etc/opt/VirtualGL/vgl_xauth_key-l") = 0 umask(022) = 077 exit_group(0) = ? + chmod 644 /etc/opt/VirtualGL/vgl_xauth_key [root&lt; at &gt;mymachine myuser]# ls -Z /etc/opt/VirtualGL/vgl_xauth_key -rw-r--r--. root root unconfined_u:object_r:etc_t:s0 /etc/opt/VirtualGL/vgl_xauth_key -- selinux mailing list selinux&lt; at &gt;lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux</pre> Mark Dalton 2012-05-07T18:29:55 Search the mailing list at Gmane query http://search.gmane.org/?group=$group=gmane.linux.redhat.fedora.selinux