Attachment 299685 Details for Bug 439745 – Output of selinux troubleshooting tool

Output of selinux troubleshooting tool

selinux_alert_.txt (text/plain), 3.88 KB, created by Mark McConnell on 2008-03-31 03:56:31 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Mark McConnell

Created: 2008-03-31 03:56:31 UTC

Size: 3.88 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing dhclient (dhcpc_t) "read write" to socket (unconfined_t).
>
>Detailed Description:
>
>SELinux denied access requested by dhclient. It is not expected that this access
>is required by dhclient and this access may signal an intrusion attempt. It is
>also possible that the specific version or configuration of the application is
>causing it to require additional access.
>
>Allowing Access:
>
>You can generate a local policy module to allow this access - see FAQ
>(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
>SELinux protection altogether. Disabling SELinux protection is not recommended.
>Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
>against this package.
>
>Additional Information:
>
>Source Context                system_u:system_r:dhcpc_t:s0
>Target Context                system_u:system_r:unconfined_t:s0
>Target Objects                socket [ unix_stream_socket ]
>Source                        dhclient
>Source Path                   /sbin/dhclient
>Port                          <Unknown>
>Host                          computer.domain.com
>Source RPM Packages           dhclient-3.0.6-12.fc8
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.0.8-93.fc8
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   catchall
>Host Name                     computer.domain.com
>Platform                      Linux computer.domain.com
>                              2.6.24.3-50.fc8 #1 SMP Thu Mar 20 13:39:08 EDT
>                              2008 x86_64 x86_64
>Alert Count                   21
>First Seen                    Sun 30 Mar 2008 03:27:39 PM PDT
>Last Seen                     Sun 30 Mar 2008 03:52:13 PM PDT
>Local ID                      ebd53640-b273-4502-9b12-712064cbb1b3
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19930]" dev=sockfs ino=19930 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19935]" dev=sockfs ino=19935 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19933]" dev=sockfs ino=19933 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19930]" dev=sockfs ino=19930 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19933]" dev=sockfs ino=19933 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=AVC msg=audit(1206917533.833:20): avc:  denied  { read write } for  pid=3437 comm="dhclient" path="socket:[19935]" dev=sockfs ino=19935 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:unconfined_t:s0 tclass=unix_stream_socket
>
>host=computer.domain.com type=SYSCALL msg=audit(1206917533.833:20): arch=c000003e syscall=59 success=yes exit=0 a0=83c9b0 a1=828800 a2=7fff01a737a8 a3=2aaaaaad0680 items=0 ppid=3328 pid=3437 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dhclient" exe="/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>
>

Actions: View

Attachments on bug 439745: 299685