Bug 222150
| Summary: | in.ntalkd can't read /var/run/utmp | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Dax Kelson <dkelson> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Ben Levenson <benl> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 6 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Current | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2007-08-22 14:12:33 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Could you please execute setenforce 0 chcon -t ktalkd_exec_t /usr/sbin/in.talkd service xinetd restart Do your talk test. setenforce 1 And send me the avc messages. /usr/sbin/in.talkd is a symlink to /usr/sbin/in.ntalkd
Here are your messages you want:
Jan 10 13:15:46 station8 kernel: audit(1168460146.105:13): avc: denied {
getattr } for pid=11992 comm="in.ntalkd" name="tty1" dev=tmpfs ino=1431
scontext=root:system_r:ktalkd_t:s0 tcontext=root:object_r:tty_device_t:s0
tclass=chr_file
Jan 10 13:15:46 station8 kernel: audit(1168460146.105:14): avc: denied {
search } for pid=11992 comm="in.ntalkd" name="/" dev=devpts ino=1
scontext=root:system_r:ktalkd_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=dir
Jan 10 13:15:46 station8 kernel: audit(1168460146.105:15): avc: denied {
getattr } for pid=11992 comm="in.ntalkd" name="1" dev=devpts ino=3
scontext=root:system_r:ktalkd_t:s0 tcontext=root:object_r:devpts_t:s0
tclass=chr_file
Jan 10 13:15:46 station8 kernel: audit(1168460146.105:16): avc: denied { write
} for pid=11998 comm="in.ntalkd" name="2" dev=devpts ino=4
scontext=root:system_r:ktalkd_t:s0 tcontext=root:object_r:devpts_t:s0
tclass=chr_file
Fixed in selinux-policy-2.4.6-25 Fixed in current release |
Description of problem: Use of talk/ytalk is failing because the daemon in.ntalkd is being prevented from reading /var/run/utmp. Jan 10 10:51:43 station4 kernel: audit(1168451503.142:32): avc: denied { read } for pid=5885 comm="in.ntalkd" name="utmp" dev=sda6 ino=26529 scontext=root:system_r:inetd_child_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file Using: selinux-policy-targeted-2.4.6-17.fc6