James Antill wrote:
 On Wed, 2006-05-24 at 14:44 -0500, Michael C Thompson wrote:
> Linda Knippers wrote:
>> I'm running the .27 kernel and the 1.2.2 tools on an x86_64
>> (Xeon/EM64T) SMP box with the targeted policy in enforcing mode.
>> I tried to reproduce the problem discussed yesterday (the very fist
>> rule doesn't take and the rest do) but it seems to work fine on my
>> system.
> I've been running mostly on an i686 (Intel) with the .27 kernel and 
> 1.2.2 tools with the MLS policy. I've tested this on an x86_64 (AMD 
> opteron) and see this problem too. However, this problem does NOT exist 
> when using targeted policy, so it is most likely an MLS SELinux issue.
> My MLS policy is 2.2.42
 
  I've recently hit the same issue (or one that looks just like it[1]) on
 current FC-5 with targeted policy in permissive mode.
 
 [1] Program calls audit_log_user_message() at boot time, and gets -1
 (EPERM) ... if you put a "for (int i = 1; i < 1; ++i)" in front of it,
 it returns 0. 
Do you mean to say that embedded audit_log_user_message() inside a loop 
changes it's return code?
int i;
for (i=1;i<1;i++) {
	audit_log_user_message();
}
Is that code sample correct?
Mike