Bug 497278
Summary: | SELinux is preventing nm-system-setti (NetworkManager_t) "write" to ifcfg-eth0 (etc_t). | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Matěj Cepl <mcepl> |
Component: | system-config-network | Assignee: | Harald Hoyer <harald> |
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | medium | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | dcbw, dwalsh, harald, jmoskovc, mcepl, mefoster |
Target Milestone: | --- | Keywords: | SELinux |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2009-04-27 12:58:05 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Matěj Cepl
2009-04-23 07:18:27 UTC
Happened just by changing network settings via system-config-network run as root (I am staff_u, so s-c-n doesn't work for me as normal user). system-config-netowork should be setting the correct context on the files it is editing. The directory is labeled net_conf_t, so system-config-network must be editing the files in a separate directory and moving them here. system-config-network could just import selinux; restorecon PATH Which would set the correct context on the file, or just create it in the /etc/syscoinfig/network-scripts directory. The files are created in the /etc/sysconfig/networking directory and hardlinked from the actual profile to /etc/sysconfig/network-scripts. Yes, I will add restorecon. Wait Harald, The correct solution then it to make sure the /etc/sysconfig/profiles directory is labeled net_conf_t and then everything will just work. /etc/sysconfig/networking/profiles(/.*)? gen_context(system_u:object_r:net_conf_t,s0) If you execute chcon -R -t net_conf_t /etc/sysconfig/networking/profiles Then run system-config-network everything should work. Fixed in selinux-policy-3.6.12-14.fc11.noarch Actually should be at /etc/sysconfig/networking(/.*)? gen_context(system_u:object_r:net_conf_t,s0) *** Bug 496246 has been marked as a duplicate of this bug. *** I just tried the chcon comment in comment #5 and the problem I reported in bug 496246 no longer occurs. |