| Summary: | SELinux is preventing /usr/sbin/NetworkManager from 'unlink' accesses on the file /etc/resolv.conf. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Ronaldo Tiou <ronaldotiou> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 19 | CC: | dominick.grift, dwalsh, lvrabec, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:b027870cdaf6dd423b3c17b7fe72a2e19d340c559a49995e4d76106e7a7fd61c | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2013-12-16 10:05:15 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
***** Plugin restorecon (99.5 confidence) suggests ************************* If você deseja reparar este rótulo. /etc/resolv.conf rótulo padrão deve ser net_conf_t. Then você pode executar o restorecon. Do # /sbin/restorecon -v /etc/resolv.conf |
Description of problem: SELinux is preventing /usr/sbin/NetworkManager from 'unlink' accesses on the file /etc/resolv.conf. ***** Plugin restorecon (99.5 confidence) suggests ************************* If você deseja reparar este rótulo. /etc/resolv.conf rótulo padrão deve ser net_conf_t. Then você pode executar o restorecon. Do # /sbin/restorecon -v /etc/resolv.conf ***** Plugin catchall (1.49 confidence) suggests *************************** If você acredita que o NetworkManager deva ser permitido acesso de unlink em resolv.conf file por default. Then você precisa reportar este como um erro. Você pode gerar um módulo de política local para permitir este acesso. Do permitir este acesso agora executando: # grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:NetworkManager_t:s0 Target Context unconfined_u:object_r:user_home_t:s0 Target Objects /etc/resolv.conf [ file ] Source NetworkManager Source Path /usr/sbin/NetworkManager Port <Desconhecido> Host (removed) Source RPM Packages NetworkManager-0.9.8.8-2.fc19.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-74.15.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.11.10-200.fc19.x86_64 #1 SMP Mon Dec 2 20:28:03 UTC 2013 x86_64 x86_64 Alert Count 42 First Seen 2013-12-09 21:28:05 BRST Last Seen 2013-12-15 18:15:29 BRST Local ID 144ff286-fa6c-4cd1-af6b-b3e8fd534a4a Raw Audit Messages type=AVC msg=audit(1387138529.521:551): avc: denied { unlink } for pid=603 comm="NetworkManager" name="resolv.conf" dev="dm-1" ino=1189450 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1387138529.521:551): arch=x86_64 syscall=rename success=no exit=EACCES a0=7fa127561b50 a1=7fa127530bc0 a2=7fa1219a87d8 a3=2d items=0 ppid=1 pid=603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm=NetworkManager exe=/usr/sbin/NetworkManager subj=system_u:system_r:NetworkManager_t:s0 key=(null) Hash: NetworkManager,NetworkManager_t,user_home_t,file,unlink Additional info: reporter: libreport-2.1.9 hashmarkername: setroubleshoot kernel: 3.11.10-200.fc19.x86_64 type: libreport Potential duplicate: bug 736215