Attachment 493798 Details for Bug 698614 – SELinux is preventing

SELinux is preventing

SELinux is preventing.txt (text/plain), 2.86 KB, created by Dirk Foerster on 2011-04-21 11:41:04 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Dirk Foerster

Created: 2011-04-21 11:41:04 UTC

Size: 2.86 KB

patch

obsolete

>ï»¿SELinux is preventing /usr/sbin/NetworkManager from using the sys_module capability.
>
>*****  Plugin sys_module (99.5 confidence) suggests  *************************
>
>If you do not believe that /usr/sbin/NetworkManager should be attempting to modify the kernel by loading a kernel module.
>Then a process might be attempting to hack into your system.
>Do
>contact your security administrator and report this issue.
>
>*****  Plugin catchall (1.49 confidence) suggests  ***************************
>
>If you believe that NetworkManager should have the sys_module capability by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol
># semodule -i mypol.pp
>
>Additional Information:
>Quellkontext                  system_u:system_r:NetworkManager_t:s0
>Zielkontext                   system_u:system_r:NetworkManager_t:s0
>Zielobjekte                   Unknown [ capability ]
>Quelle                        NetworkManager
>Quellpfad                     /usr/sbin/NetworkManager
>Port                          <Unbekannt>
>Host                          localhost.localdomain
>RPM-Pakete der Quelle         NetworkManager-0.8.3.998-2.fc14
>RPM-Pakete des Ziels          
>Richtlinien-RPM               selinux-policy-3.9.7-37.fc14
>SELinux aktiviert             True
>Richtlinientyp                targeted
>Enforcing-Modus               Enforcing
>Rechnername                   localhost.localdomain
>Plattform                     Linux localhost.localdomain
>                              2.6.35.12-88.fc14.x86_64 #1 SMP Thu Mar 31
>                              21:21:57 UTC 2011 x86_64 x86_64
>Anzahl der Alarme             2
>Zuerst gesehen                Do 21 Apr 2011 13:10:16 CEST
>Zuletzt gesehen               Do 21 Apr 2011 13:10:16 CEST
>Lokale ID                     977a3c94-5ea2-4191-8044-7a21060c9336
>
>Raw-Audit-Meldungen
>type=AVC msg=audit(1303384216.165:30): avc:  denied  { sys_module } for  pid=1139 comm="NetworkManager" capability=16  scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=capability
>
>
>type=SYSCALL msg=audit(1303384216.165:30): arch=x86_64 syscall=ioctl success=no exit=ENODEV a0=13 a1=8915 a2=7fff05f93d60 a3=310367f380 items=0 ppid=1 pid=1139 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=NetworkManager exe=/usr/sbin/NetworkManager subj=system_u:system_r:NetworkManager_t:s0 key=(null)
>
>Hash: NetworkManager,NetworkManager_t,NetworkManager_t,capability,sys_module
>
>audit2allow
>
>#============= NetworkManager_t ==============
>allow NetworkManager_t self:capability sys_module;
>
>audit2allow -R
>
>#============= NetworkManager_t ==============
>allow NetworkManager_t self:capability sys_module;
>

Actions: View

Attachments on bug 698614: 493798 | 493799