Bug 155873
| Summary: | snmpd will not start under fc3 default | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Rob Kearey <rkearey> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | i386 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2005-06-08 13:25:14 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Are you seeing this AVC mesages generated in enforcing mode? These messages usually show up in permissive mode. Clear you log files before starting snmpd and turn enforcing on and see if any AVC messages are generated? Dan Yes, you're right, sorry - I was seeing this in permissive mode. I'll retest today. *** Bug 155874 has been marked as a duplicate of this bug. *** Any update on this bug? Haven't had a chance to kick it yet, I'll do so tonight. Doesn't turn up in enforcing mode. So snmp is working? snmpd is working. |
From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.7) Gecko/20050416 Fedora/1.0.3-1.3.1 Firefox/1.0.3 Description of problem: snmpd will not start under fc3 with targeted policy enabled. It starts fine when selinux is set to permissive mode. Version-Release number of selected component (if applicable): selinux-policy-targeted-1.17.30-2.96 How reproducible: Always Steps to Reproduce: 1. set selinux to enforcing mode 2. start snmpd 3. ... watch it silently fail Actual Results: snmpd fails to start Expected Results: snmpd should start as normail Additional info: audit(1114408867.443:0): avc: denied { read } for pid=3785 exe=/usr/sbin/snmpd name=config dev=dm-0 ino=488072 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:selinux_config_t tclass=file audit(1114408867.444:0): avc: denied { getattr } for pid=3785 exe=/usr/sbin/snmpd path=/etc/selinux/config dev=dm-0 ino=488072 scontext=root:system_r:snmpd_t tcontext=system_u:object_r:selinux_config_t tclass=file