[DSE-User] denied messages for mount and swapon at startup

[Václav Ovsík]

Hi,

On Sat, Dec 15, 2007 at 12:09:43PM +0100, Simon Vallet wrote:
> Hi,
> 
> I'm currently playing a bit with SELinux (read: non-enforcing mode) on a
> Debian testing box (selinux-policy-refpolicy-targeted, version is
> 0.0.20070507-5); at boot I get the following messages :
> 
> avc:  denied  { getattr } for  pid=1023 comm="mount" name="/"
> dev=selinuxfs ino=1 scontext=system_u:system_r:mount_t:s0
> tcontext=system_u:object_r:security_t:s0 tclass=filesystem
> 
> avc:  denied  { getattr } for  pid=1088 comm="swapon" name="/"
> dev=selinuxfs ino=1 scontext=system_u:system_r:fsadm_t:s0
> tcontext=system_u:object_r:security_t:s0 tclass=filesystem
> 
> I tried autorelabeling, but that didn't help.
> 
> Any hint ?

Solved upstream. See
http://lists.alioth.debian.org/pipermail/selinux-devel/2007-November/000045.html
-- 
Zito