Original Publication Date: 05/16/2007
Updated Date: 12/10/2010
If a protected daemon attempts to perform an operation that is not allowed, the operation is blocked by the Linux kernel, and a message that appears similar to the follwing example is logged to the /var/log/messages directory:
SubDomain: REJECTING r access to /proc/cmdline (mcpd(839) profile /bin/mcpd active /bin/mcpd)
This message indicates the SubDomain Linux kernel module has blocked a daemon from performing an invalid operation.
For more information, refer to SOL5436: Description of the SubDomain Linux kernel module.