I tried the live ebuilds and something changed, but the problems didn't
go away.
Except the every present alsactl denials I have these related to cryptsetup:
Aug 31 17:48:56 dell-studio kernel: [ 10.300271] type=1400
audit(1346428122.197:11): avc: denied { getattr } for pid=1540
comm="cryptsetup" name="/" dev="tmpfs" ino=1149
scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:tmpfs_t
tclass=filesystem
Aug 31 17:48:56 dell-studio kernel: [ 10.315780] type=1400
audit(1346428122.212:12): avc: denied { read } for pid=1540
comm="cryptsetup" name="queue.bin" dev="tmpfs" ino=1876
scontext=system_u:system_r:lvm_t
tcontext=system_u:object_r:udev_var_run_t tclass=file
The following for syslog-ng:
Aug 31 17:48:56 dell-studio kernel: [ 23.588852] type=1400
audit(1346428135.485:15): avc: denied { read } for pid=2013
comm="syslog-ng" name="syslog-ng.persist" dev="sda7" ino=73729
scontext=system_u:system_r:syslogd_t
tcontext=system_u:object_r:var_lib_t tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 23.588861] type=1400
audit(1346428135.485:16): avc: denied { open } for pid=2013
comm="syslog-ng" name="syslog-ng.persist" dev="sda7" ino=73729
scontext=system_u:system_r:syslogd_t
tcontext=system_u:object_r:var_lib_t tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 23.588878] type=1400
audit(1346428135.485:17): avc: denied { getattr } for pid=2013
comm="syslog-ng" path="/var/lib/misc/syslog-ng.persist" dev="sda7"
ino=73729 scontext=system_u:system_r:syslogd_t
tcontext=system_u:object_r:var_lib_t tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 23.597238] type=1400
audit(1346428135.494:18): avc: denied { unlink } for pid=2013
comm="syslog-ng" name="syslog-ng.persist" dev="sda7" ino=73729
scontext=system_u:system_r:syslogd_t
tcontext=system_u:object_r:var_lib_t tclass=file
Again consolekit with policykit:
Aug 31 17:48:56 dell-studio kernel: [ 23.872708] type=1400
audit(1346428135.769:19): avc: denied { read } for pid=2101
comm="console-kit-dae" name="udev-acl.ck" dev="sda5" ino=1057310
scontext=system_u:system_r:consolekit_t
tcontext=system_u:object_r:udev_exec_t tclass=lnk_file
Aug 31 17:48:56 dell-studio kernel: [ 24.322689] type=1400
audit(1346428136.219:24): avc: denied { execute_no_trans } for
pid=2119 comm="dbus-daemon-lau" path="/usr/libexec/polkitd" dev="sda5"
ino=922900 scontext=system_u:system_r:system_dbusd_t
tcontext=system_u:object_r:policykit_exec_t tclass=file
Aug 31 17:50:21 dell-studio kernel: [ 110.007624] type=1400
audit(1346428221.949:50): avc: denied { search } for pid=2119
comm="polkitd" name="ConsoleKit" dev="tmpfs" ino=4520
scontext=system_u:system_r:system_dbusd_t
tcontext=system_u:object_r:consolekit_var_run_t tclass=dir
Aug 31 17:51:41 dell-studio kernel: [ 189.862655] type=1400
audit(1346428301.804:52): avc: denied { search } for pid=2119
comm="polkitd" name="ConsoleKit" dev="tmpfs" ino=4520
scontext=system_u:system_r:system_dbusd_t
tcontext=system_u:object_r:consolekit_var_run_t tclass=dir
Dbus:
Aug 31 17:48:56 dell-studio kernel: [ 24.322653] type=1400
audit(1346428136.219:23): avc: denied { read open } for pid=2119
comm="dbus-daemon-lau" name="polkitd" dev="sda5" ino=922900
scontext=system_u:system_r:system_dbusd_t
tcontext=system_u:object_r:policykit_exec_t tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 24.322689] type=1400
audit(1346428136.219:24): avc: denied { execute_no_trans } for
pid=2119 comm="dbus-daemon-lau" path="/usr/libexec/polkitd" dev="sda5"
ino=922900 scontext=system_u:system_r:system_dbusd_t
tcontext=system_u:object_r:policykit_exec_t tclass=file
Devicekit:
Aug 31 17:49:54 dell-studio kernel: [ 82.473330] type=1400
audit(1346428194.371:44): avc: denied { getattr } for pid=3187
comm="udisks-daemon" name="/" dev="sda7" ino=2
scontext=system_u:system_r:devicekit_disk_t
tcontext=system_u:object_r:fs_t tclass=filesystem
Aug 31 17:49:55 dell-studio kernel: [ 83.242850] type=1400
audit(1346428195.140:45): avc: denied { write } for pid=3232
comm="mkdir" name="/" dev="tmpfs" ino=1115
scontext=system_u:system_r:devicekit_power_t
tcontext=system_u:object_r:var_run_t tclass=dir
Aug 31 17:59:55 dell-studio kernel: [ 683.103378] type=1400
audit(1346428795.045:56): avc: denied { getattr } for pid=3178
comm="upowerd" name="/" dev="sda7" ino=2
scontext=system_u:system_r:devicekit_power_t
tcontext=system_u:object_r:fs_t tclass=filesystem
Cron:
Aug 31 17:48:56 dell-studio kernel: [ 23.951130] type=1400
audit(1346428135.848:20): avc: denied { read } for pid=2102
comm="crond" name="root" dev="sda7" ino=12796
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:file_t
tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 23.951145] type=1400
audit(1346428135.848:21): avc: denied { open } for pid=2102
comm="crond" name="root" dev="sda7" ino=12796
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:file_t
tclass=file
Aug 31 17:48:56 dell-studio kernel: [ 23.951170] type=1400
audit(1346428135.848:22): avc: denied { getattr } for pid=2102
comm="crond" path="/var/spool/cron/crontabs/root" dev="sda7" ino=12796
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:file_t
tclass=file
Aug 31 17:50:01 dell-studio kernel: [ 89.975499] type=1400
audit(1346428201.873:46): avc: denied { read open } for pid=3248
comm="sh" name="run-crons" dev="sda5" ino=922129
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:bin_t
tclass=file
Aug 31 17:50:01 dell-studio kernel: [ 89.975545] type=1400
audit(1346428201.873:47): avc: denied { getattr } for pid=3248
comm="sh" path="/usr/sbin/run-crons" dev="sda5" ino=922129
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:bin_t
tclass=file
Aug 31 17:50:01 dell-studio kernel: [ 90.006658] type=1400
audit(1346428201.905:49): avc: denied { read } for pid=3249
comm="sendmail"
path=2F746D702F63726F6E2E6F384F6E336F2F63726F6E2E726F6F742E33323437202864656C6574656429
dev="sda5" ino=2229313 scontext=system_u:system_r:system_mail_t
tcontext=system_u:object_r:crond_tmp_t tclass=file
Aug 31 17:59:01 dell-studio kernel: [ 629.136631] type=1400
audit(1346428741.078:53): avc: denied { getattr } for pid=5838
comm="sh" path="/bin/rm" dev="sda5" ino=1700617
scontext=system_u:system_r:crond_t tcontext=system_u:object_r:bin_t
tclass=file
Thank you.
Paolo.
