var/log/messages selinux error
by glib from LinuxQuestions.org on (#6P3BV)
Everything is normal on my server but for some reason it shows this error in var/log/messages?
Jul 9 22:16:11 glibserver setroubleshoot[1336451]: SELinux is preventing /usr/sbin/in.rshd from using the sys_resource capability.#012#012***** Plugin sys_resource (91.4 confidence) suggests **********************#012#012If you do not want processes to require capabilities to use up all the system resources on your system;#012Then you need to diagnose why your system is running out of system resources and fix the problem.#012#012According to /usr/include/linux/capability.h, sys_resource is required to:#012#012/* Override resource limits. Set resource limits. */#012/* Override quota limits. */#012/* Override reserved space on ext2 filesystem */#012/* Modify data journaling mode on ext3 filesystem (uses journaling#012 resources) */#012/* NOTE: ext2 honors fsuid when checking for resource overrides, so#012 you can override using fsuid too */#012/* Override size restrictions on IPC message queues */#012/* Allow more than 64hz interrupts from the real-time clock */#012/* Override max number of consoles on console allocation */#012/* Override max number of keymaps */#012#012Do#012fix the cause of the SYS_RESOURCE on your system.#012#012***** Plugin catchall (9.59 confidence) suggests **************************#012#012If you believe that in.rshd should have the sys_resource capability by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'in.rshd' --raw | audit2allow -M my-inrshd#012# semodule -X 300 -i my-inrshd.pp#012
Jul 9 22:16:11 glibserver setroubleshoot[1336451]: SELinux is preventing /usr/sbin/in.rshd from using the sys_resource capability. For complete SELinux messages run: sealert -l 100cd82d-791c-49bc-bb94-0a974fb2fbad
Jul 9 22:16:11 glibserver setroubleshoot[1336451]: SELinux is preventing /usr/sbin/in.rshd from using the sys_resource capability.#012#012***** Plugin sys_resource (91.4 confidence) suggests **********************#012#012If you do not want processes to require capabilities to use up all the system resources on your system;#012Then you need to diagnose why your system is running out of system resources and fix the problem.#012#012According to /usr/include/linux/capability.h, sys_resource is required to:#012#012/* Override resource limits. Set resource limits. */#012/* Override quota limits. */#012/* Override reserved space on ext2 filesystem */#012/* Modify data journaling mode on ext3 filesystem (uses journaling#012 resources) */#012/* NOTE: ext2 honors fsuid when checking for resource overrides, so#012 you can override using fsuid too */#012/* Override size restrictions on IPC message queues */#012/* Allow more than 64hz interrupts from the real-time clock */#012/* Override max number of consoles on console allocation */#012/* Override max number of keymaps */#012#012Do#012fix the cause of the SYS_RESOURCE on your system.#012#012***** Plugin catchall (9.59 confidence) suggests **************************#012#012If you believe that in.rshd should have the sys_resource capability by default.#012Then you should report this as a bug.#012You can generate a local policy module to allow this access.#012Do#012allow this access for now by executing:#012# ausearch -c 'in.rshd' --raw | audit2allow -M my-inrshd#012# semodule -X 300 -i my-inrshd.pp#012
Jul 9 22:16:11 glibserver setroubleshoot[1336451]: SELinux is preventing /usr/sbin/in.rshd from using the sys_resource capability. For complete SELinux messages run: sealert -l 100cd82d-791c-49bc-bb94-0a974fb2fbad