Bug 425571

Summary: Recently installed FC8. This error message has occurred 11 times. Dont know if it is important, but it keeps asking me to forward a bug report. Didn't get any such messages with FC6. You help is appreciated.
Product: [Fedora] Fedora Reporter: david guy <guy42de26>
Component: selinux-policy-targetedAssignee: Daniel Walsh <dwalsh>
Status: CLOSED NOTABUG QA Contact: Ben Levenson <benl>
Severity: medium Docs Contact:
Priority: low    
Version: 8   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-12-19 18:28:10 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description david guy 2007-12-14 22:16:41 UTC
Description of problem:
SELinux is preventing pppd (pppd_t) "write" to (pppd_etc_t).Detailed
DescriptionSELinux denied access requested by pppd. It is not expected that this
access is required by pppd and this access may signal an intrusion attempt. It
is also possible that the specific version or configuration of the application
is causing it to require additional access.Allowing AccessSometimes labeling
problems can cause SELinux denials. You could try to restore the default system
file context for , restorecon -v If this does not work, there is currently no
automatic way to allow this access. Instead, you can generate a local policy
module to allow this access - see FAQ Or you can disable SELinux protection
altogether. Disabling SELinux protection is not recommended. Please file a bug
report against this package.Additional InformationSource
Context:  system_u:system_r:pppd_t:s0Target
Context:  system_u:object_r:pppd_etc_t:s0Target Objects:  None [ file ]Affected
RPM Packages:  Policy RPM:  selinux-policy-3.0.8-64.fc8Selinux
Enabled:  TruePolicy Type:  targetedMLS Enabled:  TrueEnforcing
Mode:  EnforcingPlugin Name:  plugins.catchall_fileHost
Name:  localhost.localdomainPlatform:  Linux localhost.localdomain
2.6.23.8-63.fc8 #1 SMP Wed Nov 21 18:51:08 EST 2007 i686 i686Alert
Count:  11First Seen:  Thu 22 Nov 2007 02:05:33 PM ESTLast Seen:  Fri 14 Dec
2007 12:05:41 PM ESTLocal ID:  f69d12dc-0f15-4da3-8a46-ee17e2b15223
Raw Audit Messages :avc: denied { write } for comm=pppd dev=dm-0
name=resolv.conf pid=7681 scontext=system_u:system_r:pppd_t:s0 tclass=file
tcontext=system_u:object_r:pppd_etc_t:s0 
Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Daniel Walsh 2007-12-17 17:59:10 UTC
restorecon -R -v /etc/

Should fix the labeing/

Not sure how this got mislabeled.


Comment 2 david guy 2007-12-18 13:59:18 UTC
Thanks for the response Daniel.  I thought that the restorecon was a terminal
command, but the error message indicated that it wasn't, at least on my
system.(In reply to comment #1)
> restorecon -R -v /etc/
> 
> Should fix the labeing/
> 
> Not sure how this got mislabeled.
>