Bug 1026264
| Summary: | SELinux is preventing /usr/bin/rhythmbox from 'name_bind' accesses on the tcp_socket . | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sachin Vaidya <sachinvaidya9999> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED WONTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 19 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:b7df212800e89b76080c6c7250a296de2b12e203ed0128967c718093b78e601f | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-11-06 09:27:08 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
You will need to turn off the protection to make this working If you want to use the plugin package Then you must turn off SELinux controls on the Firefox plugins. Do # setsebool -P unconfined_mozilla_plugin_transition 0 |
Description of problem: SELinux is preventing /usr/bin/rhythmbox from 'name_bind' accesses on the tcp_socket . ***** Plugin mozplugger (99.1 confidence) suggests ************************* If you want to use the plugin package Then you must turn off SELinux controls on the Firefox plugins. Do # setsebool -P unconfined_mozilla_plugin_transition 0 ***** Plugin catchall (1.81 confidence) suggests *************************** If you believe that rhythmbox should be allowed name_bind access on the tcp_socket by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep rhythmbox /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c 0.c1023 Target Context system_u:object_r:daap_port_t:s0 Target Objects [ tcp_socket ] Source rhythmbox Source Path /usr/bin/rhythmbox Port 3689 Host (removed) Source RPM Packages rhythmbox-2.99.1-1.fc19.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-74.8.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.11.3-201.fc19.x86_64 #1 SMP Thu Oct 3 00:47:03 UTC 2013 x86_64 x86_64 Alert Count 1 First Seen 2013-10-27 22:13:03 IST Last Seen 2013-10-27 22:13:03 IST Local ID 85f52fde-13b9-4a15-aac6-eac4c7b00b0f Raw Audit Messages type=AVC msg=audit(1382892183.164:516): avc: denied { name_bind } for pid=2501 comm="rhythmbox" src=3689 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:daap_port_t:s0 tclass=tcp_socket type=SYSCALL msg=audit(1382892183.164:516): arch=x86_64 syscall=bind success=no exit=EACCES a0=f a1=7fff0ddca270 a2=1c a3=7fff0ddca23c items=0 ppid=1 pid=2501 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=1 tty=(none) comm=rhythmbox exe=/usr/bin/rhythmbox subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null) Hash: rhythmbox,mozilla_plugin_t,daap_port_t,tcp_socket,name_bind Additional info: reporter: libreport-2.1.9 hashmarkername: setroubleshoot kernel: 3.11.6-200.fc19.x86_64 type: libreport Potential duplicate: bug 854028