Bug 500986
| Summary: | can't dial in to adsl connection | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Martin Jürgens <ma> |
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | BaseOS QE <qe-baseos-auto> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 5.3 | ||
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2010-11-29 18:24:50 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
This should be fixed in the 5.4 selinux policy. Preview is available on http://people.redhat.com/dwalsh/SELinux/RHEL5 |
Description of problem: When SELinux is set to enforcing in el 5.3 with latest updates, I can't dial in using my ADSL connection. This only happens if there is another ethernet connection active when I am dialing in. Output: Apr 25 14:29:31 dialinproxy kernel: eth1: setting full-duplex. Apr 25 14:29:31 dialinproxy kernel: type=1400 audit(1240662571.215:4): avc: denied { read write } for pid=2951 comm="pppd" name="pppd2.tdb" dev=dm-0 ino=7209197 scontext=root:system_r:pppd_t:s0 tcontext=root:object_r:var_run_t:s0 tclass=file Apr 25 14:29:31 dialinproxy pppd[2951]: Warning: couldn't open ppp database /var/run/pppd2.tdb Apr 25 14:29:31 dialinproxy pppd[2951]: pppd 2.4.4 started by root, uid 0 Apr 25 14:29:31 dialinproxy pppd[2952]: Fatal signal 11 Apr 25 14:29:31 dialinproxy pppd[2952]: Exit. Apr 25 14:29:31 dialinproxy pppd[2951]: Couldn't get channel number: Input/output error Apr 25 14:29:31 dialinproxy pppd[2951]: Exit. Apr 25 14:29:31 dialinproxy adsl-connect: ADSL connection lost; attempting re-connection. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: New relevant interface eth1.IPv6 for mDNS. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: Joining mDNS multicast group on interface eth1.IPv6 with address fe80::201:2ff:fedb:11ed. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: Registering new address record for fe80::201:2ff:fedb:11ed on eth1. Apr 25 14:29:36 dialinproxy kernel: type=1400 audit(1240662576.266:5): avc: denied { read write } for pid=2960 comm="pppd" name="pppd2.tdb" dev=dm-0 ino=7209197 scontext=root:system_r:pppd_t:s0 tcontext=root:object_r:var_run_t:s0 tclass=file Apr 25 14:29:36 dialinproxy pppd[2960]: Warning: couldn't open ppp database /var/run/pppd2.tdb Apr 25 14:29:36 dialinproxy pppd[2960]: pppd 2.4.4 started by root, uid 0 Apr 25 14:29:36 dialinproxy pppd[2961]: Fatal signal 11 Apr 25 14:29:36 dialinproxy pppd[2961]: Exit. Apr 25 14:29:36 dialinproxy pppd[2960]: Couldn't get channel number: Input/output error Apr 25 14:29:36 dialinproxy pppd[2960]: Exit. selinux-policy-2.4.6-203.el5 rp-pppoe-3.5-32.1