On 23/05/17 12:07, Lukas Vrabec wrote:

On 05/23/2017 12:56 PM, lejeczek wrote:

...

hi fellas

I don't want to disable se, I cannot find booleans, there is no domain for htcondor I think. How do I let my htcondor through? with se:

condor_submit[29217]: segfault at 0 ip (null) sp 00007ffd7dfa61c8

type=ANOM_ABEND msg=audit(1495536871.977:1484): auid=2501 uid=1177 gid=513 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1532 comm="condor_submit" reason="memory violation" sig=11

disable se and works.

many thanks. L. _______________________________________________ selinux mailing list -- selinux@lists.fedoraproject.org To unsubscribe send an email to selinux-leave@lists.fedoraproject.org

Hi,

Could you reproduce the scenario and then attach output of: # ausearch -m AVC,USER_AVC -ts recent

Thanks, Lukas.

hi, ausearch as above finds nothing, with only "recent" all the grep condor finds is that one line. Should I include a few more lines before that condor one?