Bug 1343683

Summary: AVCs starting hostapd
Product: [Fedora] Fedora Reporter: Tom Hughes <tom>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: medium    
Version: 24CC: dominick.grift, dwalsh, lvrabec, mgrepl, plautrba
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: selinux-policy-3.13.1-191.fc24.2 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-06-27 18:27:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tom Hughes 2016-06-07 16:44:45 UTC
Description of problem:

time->Tue Jun  7 17:43:45 2016
type=AVC msg=audit(1465317825.827:914): avc:  denied  { create } for  pid=13865 comm="hostapd" scontext=system_u:system_r:hostapd_t:s0 tcontext=system_u:system_r:hostapd_t:s0 tclass=netlink_generic_socket permissive=1
----
time->Tue Jun  7 17:43:45 2016
type=AVC msg=audit(1465317825.828:915): avc:  denied  { setopt } for  pid=13865 comm="hostapd" scontext=system_u:system_r:hostapd_t:s0 tcontext=system_u:system_r:hostapd_t:s0 tclass=netlink_generic_socket permissive=1
----
time->Tue Jun  7 17:43:45 2016
type=AVC msg=audit(1465317825.828:916): avc:  denied  { bind } for  pid=13865 comm="hostapd" scontext=system_u:system_r:hostapd_t:s0 tcontext=system_u:system_r:hostapd_t:s0 tclass=netlink_generic_socket permissive=1
----
time->Tue Jun  7 17:43:45 2016
type=AVC msg=audit(1465317825.828:917): avc:  denied  { getattr } for  pid=13865 comm="hostapd" scontext=system_u:system_r:hostapd_t:s0 tcontext=system_u:system_r:hostapd_t:s0 tclass=netlink_generic_socket permissive=1

Version-Release number of selected component (if applicable):

selinux-policy-3.13.1-190.fc24.noarch

Comment 1 Fedora Update System 2016-06-22 23:02:11 UTC
selinux-policy-3.13.1-191.fc24.2 has been pushed to the Fedora 24 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2016-7553eb6439

Comment 2 Fedora Update System 2016-06-27 18:26:53 UTC
selinux-policy-3.13.1-191.fc24.2 has been pushed to the Fedora 24 stable repository. If problems still persist, please make note of it in this bug report.