| Summary: | SELinux blocks openlmi-networking from reading /proc/net/dev | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Radek Novacek <rnovacek> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Milos Malik <mmalik> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 7.0 | CC: | mmalik, ovasik |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.12.1-91.el7 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-06-13 12:44:45 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
commit a3ca57a681a4a7a5aed5eed3cd49db2e034648e0
Author: Miroslav Grepl <mgrepl>
Date: Wed Oct 16 11:38:01 2013 +0200
Allow openlmi-networking to read /proc/net/dev
This request was resolved in Red Hat Enterprise Linux 7.0. Contact your manager or support representative in case you have further questions about the request. |
Description of problem: openlmi-networking fails to read /proc/net/dev file because it's blocked by selinux. openlmi-networking takes network device statistics out of this file. Version-Release number of selected component (if applicable): selinux-policy-3.12.1-86.el7 AVC follows: time->Fri Oct 4 12:57:36 2013 type=SYSCALL msg=audit(1380884256.792:465): arch=c000003e syscall=2 success=no exit=-13 a0=7f0439e435dc a1=0 a2=1b6 a3=0 items=0 ppid=1 pid=2137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt" exe="/usr/libexec/pegasus/cimprovagt" subj=system_u:system_r:pegasus_openlmi_system_t:s0 key=(null) type=AVC msg=audit(1380884256.792:465): avc: denied { read } for pid=2137 comm="cimprovagt" name="dev" dev="proc" ino=4026531975 scontext=system_u:system_r:pegasus_openlmi_system_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file ----