Attachment 317685 Details for Bug 459324 – SELinux error report 2

SELinux error report 2

selinux_kismet_2.txt (text/plain), 2.84 KB, created by Jean-Francois Saucier on 2008-09-25 12:51:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jean-Francois Saucier

Created: 2008-09-25 12:51:42 UTC

Size: 2.84 KB

patch

obsolete

>
>Summary:
>
>SELinux is preventing the kismet_server (kismet_t) from binding to port 2501.
>
>Detailed Description:
>
>SELinux has denied the kismet_server from binding to a network port 2501 which
>does not have an SELinux type associated with it. If kismet_server is supposed
>to be allowed to listen on this port, you can use the semanage command to add
>this port to a port type that kismet_t can bind to. semanage port -l will list
>all port types. Please file a bug report
>(http://bugzilla.redhat.com/bugzilla/enter_bug.cgi) against the selinux-policy
>package. If kismet_server is not supposed to bind to this port, this could
>signal a intrusion attempt. If this system is running as an NIS Client, turning
>on the allow_ypbind boolean, may fix the problem. setsebool -P allow_ypbind=1.
>
>Allowing Access:
>
>If you want to allow kismet_server to bind to this port semanage port -a -t
>PORT_TYPE -p PROTOCOL 2501 Where PORT_TYPE is a type that kismet_t can bind and
>PROTOCOL is udp or tcp.
>
>Additional Information:
>
>Source Context                unconfined_u:unconfined_r:kismet_t:s0-s0:c0.c1023
>Target Context                system_u:object_r:port_t:s0
>Target Objects                None [ tcp_socket ]
>Source                        kismet_server
>Source Path                   /usr/bin/kismet_server
>Port                          2501
>Host                          portable.linuxinfo.ath.cx
>Source RPM Packages           kismet-0.0.2008.05.R1-2.fc9
>Target RPM Packages           
>Policy RPM                    selinux-policy-3.3.1-91.fc9
>Selinux Enabled               True
>Policy Type                   targeted
>MLS Enabled                   True
>Enforcing Mode                Enforcing
>Plugin Name                   bind_ports
>Host Name                     portable.linuxinfo.ath.cx
>Platform                      Linux portable.linuxinfo.ath.cx
>                              2.6.25.14-108.fc9.i686 #1 SMP Mon Aug 4 14:08:11
>                              EDT 2008 i686 i686
>Alert Count                   1
>First Seen                    Thu 25 Sep 2008 08:46:28 AM EDT
>Last Seen                     Thu 25 Sep 2008 08:46:28 AM EDT
>Local ID                      32ca80e1-de60-4a1f-99b3-e78d0e0e50c8
>Line Numbers                  
>
>Raw Audit Messages            
>
>host=portable.linuxinfo.ath.cx type=AVC msg=audit(1222346788.481:35): avc:  denied  { name_bind } for  pid=4367 comm="kismet_server" src=2501 scontext=unconfined_u:unconfined_r:kismet_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=tcp_socket
>
>host=portable.linuxinfo.ath.cx type=SYSCALL msg=audit(1222346788.481:35): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bf9db310 a2=80ec2c0 a3=bf9db890 items=0 ppid=4366 pid=4367 auid=500 uid=492 gid=483 euid=492 suid=492 fsuid=492 egid=483 sgid=483 fsgid=483 tty=pts1 ses=1 comm="kismet_server" exe="/usr/bin/kismet_server" subj=unconfined_u:unconfined_r:kismet_t:s0-s0:c0.c1023 key=(null)
>
>

Actions: View

Attachments on bug 459324: 314440 | 314442 | 317684 | 317685 | 319440 | 320588 | 320589 | 322133 | 325319 | 326731 | 326732 | 328549 | 331383 | 331384 | 331467