Strange Message in /var/log/message

[IRCBrasil]

Hi, i have a RH 4 with Kernel 2.6.9-22.0.1.ELsmp and i am receiving this message on logs:

Jan  9 19:08:41 ss32 kernel: audit(1136840944.333:58): avc:  denied  { read } for  pid=23095 comm="rndc" name="self" dev=proc ino=2 scontext=root:system_r:ndc_t tcontext=system_u:object_r:proc_t tclass=lnk_file
Jan  9 19:08:41 ss32 kernel: audit(1136840944.333:59): avc:  denied  { read } for  pid=23095 comm="rndc" name="exe" dev=proc ino=1513553928 scontext=root:system_r:ndc_t tcontext=root:system_r:ndc_t tclass=lnk_file

Someone know how fix it?

Thaks 4all!

[chirpy]

IIRC, I believe that's SELINUX. If so, make sure it's disabled.

[IRCBrasil]

Originally Posted by chirpy

IIRC, I believe that's SELINUX. If so, make sure it's disabled.

I dont think is it

root@ss32 [/etc/selinux]# cat config 
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#       enforcing - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled - SELinux is fully disabled.
SELINUX=disable
# SELINUXTYPE= type of policy in use. Possible values are:
#       targeted - Only targeted network daemons are protected.
#       strict - Full SELinux protection.
SELINUXTYPE=targeted
root@ss32 [/etc/selinux]#

[Izzee]

Should that not be:
SELINUX=disabled

Not:
SELINUX=disable

[IRCBrasil]

Originally Posted by Izzee

Should that not be:
SELINUX=disabled

Not:
SELINUX=disable

WOWWWW

I cant belive i forgot to put a simple "d"

Thank you

[rsutc]

Originally Posted by chirpy

IIRC, I believe that's SELINUX. If so, make sure it's disabled.

Why should selinux be disabled?

RIck

[IberHosting]

SELinux can cause some incompatabilities with cPanel

[Manuel_accu]

Generally I have to restart my server after disabling it from config file. Is there any way without restarting I can disabled the SELinux feature?

Thanks,

[Un Area]

Editing /etc/selinux/config file will disable SELinux on boot, however it will remain enabled until you restart the server.
To disable it without having to reboot type this command at the prompt

setenforce 0

And there you go! Selinux fully disabled without restarting

Regards

[NT]

I believe you run "setenforce 0" (without the quotes) in shell, but I might be mistaken.

[chirpy]

Have a read of:
http://www.redhat.com/docs/manuals/e...N-SECTION-0076

[Un Area]

You are right, I just edited my post SElinux is still a prototype for enhanced security, anyways you can secure your server in different ways.

[Manuel_accu]

Neat!!!


very good information and URL of RedHat