Bug 292881
Summary: | SELinux is preventing /sbin/ifconfig (ifconfig_t) "read write" to /var/run/tuncfg.lock (initrc_t). | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Martin Jürgens <ma> | ||||
Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> | ||||
Status: | CLOSED WONTFIX | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
Severity: | low | Docs Contact: | |||||
Priority: | medium | ||||||
Version: | 7 | ||||||
Target Milestone: | --- | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2008-02-18 15:08:42 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Attachments: |
|
Description
Martin Jürgens
2007-09-17 09:36:25 UTC
Created attachment 197211 [details]
selinux_alert
I've never heard about Hamachi? Is that something I can install from a Fedora repo? No, it is not.. It is a proprietary VPN application, see https://secure.logmein.com/home.asp?lang=de This is a leaked file descriptor. Hamachi should be closing all file descriptors on exec. fcntl(fd, F_SETFD, FD_CLOEXEC) This can be ignored, as SELinux is closing the file descriptor before starting ifconfig. You can either dontaudit it or allow it using audit2allow, to get rid of the message. # audit2allow -M mypol -i /var/log/audit/audit.log # semodule -i mypol.pp |