Attachment 840912 Details for Bug 1045682 – journal output showing execstack and execmem denials for dhclient

journal output showing execstack and execmem denials for dhclient

dhclient (text/plain), 6.57 KB, created by Adam Williamson on 2013-12-23 17:36:58 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Williamson

Created: 2013-12-23 17:36:58 UTC

Size: 6.57 KB

patch

obsolete

>Dec 23 09:33:02 adam.happyassassin.net NetworkManager[1024]: <info> dhclient started with pid 2185
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execstack } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execmem } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819982.269:715): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5792b000 a1=1000 a2=1000007 a3=0 items=0 ppid=1024 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dhclient" exe="/usr/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execstack } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execmem } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819982.269:715): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5792b000 a1=1000 a2=1000007 a3=0 items=0 ppid=1024 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dhclient" exe="/usr/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Internet Systems Consortium DHCP Client 4.2.5
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Copyright 2004-2013 Internet Systems Consortium.
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: All rights reserved.
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: For info, please visit https://www.isc.org/software/dhcp/
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Dec 23 09:33:02 adam.happyassassin.net NetworkManager[1024]: Internet Systems Consortium DHCP Client 4.2.5
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Listening on LPF/em1/f4:6d:04:9a:1d:45
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Sending on   LPF/em1/f4:6d:04:9a:1d:45
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: Sending on   Socket/fallback
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: DHCPREQUEST on em1 to 255.255.255.255 port 67 (xid=0xebdd059)
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: DHCPACK from 192.168.1.1 (xid=0xebdd059)
>Dec 23 09:33:02 adam.happyassassin.net dhclient[2185]: bound to 192.168.1.5 -- renewal in 2147483648 seconds.
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execstack } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execmem } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819982.269:715): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5792b000 a1=1000 a2=1000007 a3=0 items=0 ppid=1024 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dhclient" exe="/usr/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execstack } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819982.269:715): avc:  denied  { execmem } for  pid=2185 comm="dhclient" scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=process
>Dec 23 09:33:02 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819982.269:715): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5792b000 a1=1000 a2=1000007 a3=0 items=0 ppid=1024 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dhclient" exe="/usr/sbin/dhclient" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>Dec 23 09:33:03 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/sbin/dhclient from using the execstack access on a process. For complete SELinux messages. run sealert -l 3024c81d-e31a-43cd-8750-f97b6229f38d
>Dec 23 09:33:03 adam.happyassassin.net python[955]: SELinux is preventing /usr/sbin/dhclient from using the execstack access on a process.
>                                                    If you believe that dhclient should be allowed execstack access on processes labeled dhcpc_t by default.
>                                                    # grep dhclient /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:03 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/sbin/dhclient from using the execstack access on a process. For complete SELinux messages. run sealert -l 3024c81d-e31a-43cd-8750-f97b6229f38d
>Dec 23 09:33:03 adam.happyassassin.net python[955]: SELinux is preventing /usr/sbin/dhclient from using the execstack access on a process.
>                                                    If you believe that dhclient should be allowed execstack access on processes labeled dhcpc_t by default.
>                                                    # grep dhclient /var/log/audit/audit.log | audit2allow -M mypol

Actions: View

Attachments on bug 1045682: 839925 | 840912