Bug 1806559

Summary:	SELinux is preventing unbound from 'name_bind' accesses on the udp_socket port 61000.
Product:	[Fedora] Fedora	Reporter:	Ludovic Hirlimann [:Paul-muadib] <ludovic>
Component:	selinux-policy	Assignee:	Zdenek Pytela <zpytela>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	low	Docs Contact:
Priority:	low
Version:	31	CC:	dwalsh, grepl.miroslav, lvrabec, plautrba, vmojzis, zpytela
Target Milestone:	---	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-03-17 15:33:49 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Ludovic Hirlimann [:Paul-muadib] 2020-02-24 14:19:37 UTC

This bug was initially created as a copy of Bug #1259766

I am copying this bug because: 

[ludovic@saraan ~]$ cat /etc/redhat-release 
Fedora release 31 (Thirty One)

I'm seeing errors like :
Feb 24 15:02:23 saraan audit[2769]: AVC avc:  denied  { name_bind } for  pid=2769 comm="unbound" src=61000 scontext=system_u:system_r:named_t:s0 tcontext=s>

in my Journal.

selinux-policy-3.14.4-48.fc31.noarch

Comment 1 Lukas Vrabec 2020-02-24 14:49:43 UTC

Hi Ludovic, 

Could you please share the whole msg? 

Please attach output of: 

# ausearch -m AVC 

Thanks,
Lukas.

Comment 2 Ludovic Hirlimann [:Paul-muadib] 2020-02-24 14:51:09 UTC

(In reply to Lukas Vrabec from comment #1)
> Hi Ludovic, 
> 
> Could you please share the whole msg? 
> 
> Please attach output of: 
> 
> # ausearch -m AVC 

time->Mon Feb 24 15:09:24 2020
type=AVC msg=audit(1582553364.360:374): avc:  denied  { name_bind } for  pid=2769 comm="unbound" src=61000 scontext=system_u:system_r:named_t:s0 tcontext=system_u:object_r:port_t:s0 tclass=udp_socket permissive=0

Comment 3 Zdenek Pytela 2020-03-17 15:33:49 UTC


*** This bug has been marked as a duplicate of bug 1667742 ***