Hello!

My name is Tetsuji Masuda , I`m university student in Japan.

I installed SELinux(2.4.9) in RH7.1. However I can`t use `kon` command in console window. When I pushed returen button after I typed `kon`, the window was, somehow, freezed. What's the problem about that?

This is log of kon in /var/log/messages.

Dec 17 14:20:27 pc07 kernel: 
Dec 17 14:20:27 pc07 kernel: avc:  denied  { read write } for  pid=12513 exe=/usr/bin/kon path=/dev/mem dev=03:06 ino=198216
Dec 17 14:20:27 pc07 kernel:    scontext=root:sysadm_r:sysadm_t
Dec 17 14:20:27 pc07 kernel:    tcontext=system_u:object_r:memory_device_t
Dec 17 14:20:27 pc07 kernel:    tclass=chr_file
Dec 17 14:20:27 pc07 kernel: 
Dec 17 14:20:27 pc07 kernel: avc:  denied  { read write } for  pid=12513 exe=/usr/bin/kon path=/dev/ptyp0 dev=03:06 ino=198701
Dec 17 14:20:27 pc07 kernel:    scontext=root:sysadm_r:sysadm_t
Dec 17 14:20:27 pc07 kernel:    tcontext=system_u:object_r:device_t
Dec 17 14:20:27 pc07 kernel:    tclass=chr_file
Dec 17 14:20:27 pc07 kernel: 
Dec 17 14:20:27 pc07 kernel: avc:  denied  { ioctl } for  pid=12513 exe=/usr/bin/kon path=/dev/ptyp0 dev=03:06 ino=198701
Dec 17 14:20:27 pc07 kernel:    scontext=root:sysadm_r:sysadm_t
Dec 17 14:20:27 pc07 kernel:    tcontext=system_u:object_r:device_t
Dec 17 14:20:27 pc07 kernel:    tclass=chr_file
Dec 17 14:20:27 pc07 kernel: Unable to handle kernel paging request at virtual address 66207369
Dec 17 14:20:27 pc07 kernel:  printing eip:
Dec 17 14:20:27 pc07 kernel: c018f303
Dec 17 14:20:27 pc07 kernel: *pde = 00000000
Dec 17 14:20:27 pc07 kernel: Oops: 0000
Dec 17 14:20:27 pc07 kernel: CPU:    0
Dec 17 14:20:28 pc07 kernel: EIP:    0010:[ipc_precondition+19/96]
Dec 17 14:20:28 pc07 kernel: EIP:    0010:[<c018f303>]
Dec 17 14:20:28 pc07 kernel: EFLAGS: 00010206
Dec 17 14:20:28 pc07 kernel: eax: 66207369   ebx: c3286420   ecx: c764f3e0   edx: c02bb098
Dec 17 14:20:28 pc07 kernel: esi: 0000001c   edi: c3286420   ebp: c75fc000   esp: c75fdedc
Dec 17 14:20:28 pc07 kernel: ds: 0018   es: 0018   ss: 0018
Dec 17 14:20:28 pc07 kernel: Process kon (pid: 12513, stackpage=c75fd000)
Dec 17 14:20:28 pc07 kernel: Stack: c3286420 c764f3e0 c75fc000 c019095f c3286420 0000001c 00000000 00000000 
Dec 17 14:20:28 pc07 kernel:        c7f9c720 c02a3a18 bffff980 c1894460 00000004 00000000 00000000 00000000 
Dec 17 14:20:28 pc07 kernel:        00000000 00000000 00000000 000342c3 0000001c c764f3e0 00000124 c764f3e0 
Dec 17 14:20:28 pc07 kernel: Call Trace: [selinux_shm_associate+47/560] [selinux_ipc_permission+77/96] [ipcperms+143/160] [sys_shmget+273/336] [sys_ipc+564/624] 
Dec 17 14:20:28 pc07 kernel: Call Trace: [<c019095f>] [<c019111d>] [<c017d05f>] [<c0180761>] [<c010c314>] 
Dec 17 14:20:28 pc07 kernel:    [system_call+51/56] 
Dec 17 14:20:28 pc07 kernel:    [<c0106edb>] 
Dec 17 14:20:28 pc07 kernel: 
Dec 17 14:20:28 pc07 kernel: Code: 81 38 8c ff 7c f9 75 07 b8 01 00 00 00 eb 2b bb 00 e0 ff ff 

==========================================================================================

I translated the policy document with Japanese as research. I'm not sure it was correct or not. However I want to use it for report of it. If you agreed of it or disagreed, please let me know. And If you have a good idea instend of it, it's also tell me the detale of it.

--

$BA}ED(B $BE/<!(B /Tetsuji Masuda
$BEl5~9)2JBg3X9)3XIt>pJs9)3X2J(B4$BG/(B /Tokyo University of Technology
$B@i<o8&5f<<(B /Chigusa Laboratory

--

You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. Received on Wed 19 Dec 2001 - 21:47:28 EST