Bug 219606
| Summary: | SELinux irqbalance denial occurs every few seconds | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | vfiend | ||||
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> | ||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 6 | CC: | djuran, erik.sohns, torsten, vcamilloni | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Current | Doc Type: | Bug Fix | ||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2007-08-22 14:12:40 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
Created attachment 143692 [details]
irqbalance targeted selilnux policy
here is the policy file for irqbalance to allow it to access the proc files it
needs to properly balance irq's
Fixed in selinux-policy-2.4.6-13 Where can we find 2.4.6-13? I don't see it in updates-testing. Thanks, Andy. Sorry, I forgot to press the submit to forwarding button. Should be there tonight. I have also made it available on http://people.redhat.com/dwalsh/SELinux/FC6 *** Bug 220178 has been marked as a duplicate of this bug. *** *** Bug 220334 has been marked as a duplicate of this bug. *** *** Bug 224194 has been marked as a duplicate of this bug. *** Fixed in current release |
Summary SELinux is preventing /usr/sbin/irqbalance (irqbalance_t) "search" access to net (proc_net_t). ... Additional Information: Source Context: system_u:system_r:irqbalance_t Target Context: system_u:object_r:proc_net_t Target Objects: net [ dir ] Affected RPM Packages: irqbalance-0.55-2.fc6 [application] Policy RPM: selinux-policy-2.4.6-7.fc6 Selinux Enabled: True Policy Type: targeted MLS Enabled: True Enforcing Mode: Enforcing Plugin Name: plugins.disable_trans Host Name: icarus Platform: Linux icarus 2.6.18-1.2849.fc6 #1 SMP Fri Nov 10 12:34:46 EST 2006 x86_64 x86_64 Alert Count: 76 Line Numbers: Raw Audit Messages: avc: denied { search } for comm="irqbalance" dev=proc egid=0 euid=0 exe="/usr/sbin/irqbalance" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="net" pid=2186 scontext=system_u:system_r:irqbalance_t:s0 sgid=0 subj=system_u:system_r:irqbalance_t:s0 suid=0 tclass=dir tcontext=system_u:object_r:proc_net_t:s0 tty=(none) uid=0