Errors on boot up

Robert Wilson

• July 16, 2014 12:54

Hi guys, My vps had a problem when the hard drive got full mysql wouldnt boot up. I had to remove some logs and backups and went through some other stuff to free up some space. Now its running again on a system reboot i got the following errors. type=1400 audit(1405505960.008:113): avc: denied { getattr } for pid=2616 com m="login" path="/var/cpanel/hulkd/enabled" dev=vda3 ino=1834059 scontext=system_ u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tcla ss=file type=1400 audit(1405505960.011:114): avc: denied { read } for pid=2616 comm=" login" name="pam" dev=vda3 ino=1834392 scontext=system_u:system_r:local_login_t: s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=file type=1400 audit(1405505960.015:115): avc: denied { open } for pid=2616 comm=" login" name="pam" dev=vda3 ino=1834392 scontext=system_u:system_r:local_login_t: s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=file type=1400 audit(1405505960.028:116): avc: denied { write } for pid=2616 comm= "login" name="cphulkd.sock" dev=vda3 ino=1832334 scontext=system_u:system_r:loca l_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_fil e type=1400 audit(1405505960.033:117): avc: denied { connectto } for pid=2616 c omm="login" path="/var/run/cphulkd.sock" scontext=system_u:system_r:local_login_ t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_stream_socke t Password: Login incorrect login: root type=1400 audit(1405505969.110:118): avc: denied { read } for pid=2719 comm=" unix_chkpwd" name="shadow" dev=vda3 ino=524241 scontext=system_u:system_r:chkpwd _t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file type=1400 audit(1405505969.113:119): avc: denied { open } for pid=2719 comm=" unix_chkpwd" name="shadow" dev=vda3 ino=524241 scontext=system_u:system_r:chkpwd _t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file type=1400 audit(1405505969.115:120): avc: denied { getattr } for pid=2719 com m="unix_chkpwd" path="/etc/shadow" dev=vda3 ino=524241 scontext=system_u:system_ r:chkpwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file Password: type=1400 audit(1405505972.027:121): avc: denied { getattr } for pid=2616 com m="login" path="/var/cpanel/hulkd/enabled" dev=vda3 ino=1834059 scontext=system_ u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tcla ss=file type=1400 audit(1405505972.030:122): avc: denied { read } for pid=2616 comm=" login" name="pam" dev=vda3 ino=1834392 scontext=system_u:system_r:local_login_t: s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=file type=1400 audit(1405505972.032:123): avc: denied { open } for pid=2616 comm=" login" name="pam" dev=vda3 ino=1834392 scontext=system_u:system_r:local_login_t: s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=file type=1400 audit(1405505972.035:124): avc: denied { write } for pid=2616 comm= "login" name="cphulkd.sock" dev=vda3 ino=1832334 scontext=system_u:system_r:loca l_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_fil e type=1400 audit(1405505972.039:125): avc: denied { connectto } for pid=2616 c omm="login" path="/var/run/cphulkd.sock" scontext=system_u:system_r:local_login_ t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_stream_socke t type=1400 audit(1405505972.131:126): avc: denied { read write } for pid=2616 comm="login" name="lastlog" dev=vda3 ino=1831525 scontext=system_u:system_r:loca l_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_log_t:s0 tclass=file
Can anyone shed some light on this for me. Kind Regards Robert Wilson

• 

  cPanelMichael

  • July 16, 2014 19:13

  Hello :) Do you have SELinux enabled on this system? If so, please disable it and let us know if the issue persists. Thank you.

  0
• 

  Robert Wilson

  • July 17, 2014 15:24

  Hey, Thanks for the fast reply, its set to permissive and targeted for the type. Disabled and then had no more errors. Do i need it set on? is there any less security from not using it? Regards Rob

  0
• 

  cPanelMichael

  • July 22, 2014 19:07

  You should leave SELinux disabled, as it's not supported with cPanel/WHM at this time. Thank you.

  0

Please sign in to leave a comment.