Bug 538154

Summary: SELinux is preventing /sbin/consoletype access to a leaked packet_socket file descriptor.
Product: [Fedora] Fedora Reporter: id_EAGLE <id.eagle.id>
Component: pppAssignee: Jiri Skala <jskala>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: low    
Version: 12CC: 2k.karthik, aalam, abhi_q7gpx, abhishekvmulay, aglotov, aguafria17, airxiechao, anewray, antioligarkico, antoncordell32, arsiel71, asrpavankumark, bapi.sahoo708, blackxhat, BugRocks2010, burdakmp, charles.liu23, chenhuan.gt, chinwen_lin, clanger.christian, co.silviu, cristian171119, cyrusyzgtt, danielitesix, danieljucan, dnker, dof5, dra_k_oon, drmanishdangi77, dwalsh, gallego.77, ganesh.rajaiyan, gedsonrios, george.vicentiu, gtalk.kiran, halon.by, happysatnam, himadri_system, i6826, id.eagle.id, ide.neon, igareok, jarq.1602, JESH.J, john_antony40, jskala, koshaduk, kvgaydhani, lcostafraga, mahmoud_payami, marciodassie, mgrepl, milind2112, mister.freedom, mmb.prog, motuws, musa_abuh, panda.debabrata.2009, pattheo1, pivop, presoblue, pyacahamaneni, raokekaka, ravigpa, ravindra.fedora, r_brakchi, ritunath1857, rjh.richter13, rmknnvc, rockstarsavin, roger_paixao, rosh.j.kalathil, rs55_ame, sa666ka, sahebgouda, saq899, sehathesam, serega-2008ne, shatrovsergei, shekhawatpriyanka1, shiv.itm, skyblue1988, soma-sk8, sparsa4, ssntc11, sumanth_yn, sumitrai96, svkelkar, sztrakay.bence, tauras_king1988, tiankuiboy, tianxiexingnazi, timeman, tuplu.cupid, varunlal.kp, vikas2009yadav, vrooli, wainy.163, wminway, xialulushishi100, xxxidiosyncraticxxx, ywen34, zahids2k, ZHbuga
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard: setroubleshoot_trace_hash:f4bca96a28a9390a3dd603bdf9a375a3bb0ed7efd187fa8a6d7eb6c207b1a055
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-11-18 09:49:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description id_EAGLE 2009-11-17 19:09:58 UTC
Hash String generated from  selinux-policy-3.6.32-41.fc12,leaks,consoletype,consoletype_t,pppd_t,packet_socket,read,write
audit2allow suggests:

Comment 1 id_EAGLE 2009-11-17 19:20:33 UTC
When I connect to ADSL or disconnect from the ADSL and switch to the LAN network, I receive this error.

Comment 2 Daniel Walsh 2009-11-17 21:19:09 UTC
ppp is leaking file descriptors.  id_EAGLE you can safely ignore this.  the connection to the packet_socket in ppp should call fcntl(socket, F_SETFD, FD_CLOEXEC)


SELinux is closing the leaked file descriptor for you but it would better if the code was cleaned up.

Comment 3 Jiri Skala 2009-11-18 09:49:06 UTC
Please, see comment #2 of #531374 and test it.

Thanks Jiri

*** This bug has been marked as a duplicate of bug 531374 ***

Comment 4 Jiri Skala 2009-11-25 06:59:13 UTC
Hi all,
this is funny to watch that a lot of people is CCing in closed bug. Don't wait here changes and see the link in the duplicity bug #531374. There is a link to test build. Is there anybody willing to test it?

This is really terminus for this bug!!!

Comment 5 vikas yadav 2010-02-22 02:45:25 UTC
i couldn't update my software the below error has occured
Error Type: <class 'yum.Errors.RepoError'>
Error Value: Error getting repository data for installed, repository not found
  File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 3125, in <module>
    main()
  File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 3122, in main
    backend.dispatcher(sys.argv[1:])
  File : /usr/lib/python2.6/site-packages/packagekit/backend.py, line 710, in dispatcher
    self.dispatch_command(args[0], args[1:])
  File : /usr/lib/python2.6/site-packages/packagekit/backend.py, line 657, in dispatch_command
    self.update_packages(only_trusted, package_ids)
  File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 1948, in update_packages
    signed = self._is_package_repo_signed(pkg)
  File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 1437, in _is_package_repo_signed
    repo = self.yumbase.repos.getRepo(pkg.repoid)
  File : /usr/lib/python2.6/site-packages/yum/repos.py, line 121, in getRepo
    'Error getting repository data for $s, repository not found' $ (repoid)

Comment 6 manish 2010-04-07 13:17:30 UTC
(In reply to comment #5)
> i couldn't update my software the below error has occured
> Error Type: <class 'yum.Errors.RepoError'>
> Error Value: Error getting repository data for installed, repository not found
>   File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 3125, in
> <module>
>     main()
>   File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 3122, in main
>     backend.dispatcher(sys.argv[1:])
>   File : /usr/lib/python2.6/site-packages/packagekit/backend.py, line 710, in
> dispatcher
>     self.dispatch_command(args[0], args[1:])
>   File : /usr/lib/python2.6/site-packages/packagekit/backend.py, line 657, in
> dispatch_command
>     self.update_packages(only_trusted, package_ids)
>   File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 1948, in
> update_packages
>     signed = self._is_package_repo_signed(pkg)
>   File : /usr/share/PackageKit/helpers/yum/yumBackend.py, line 1437, in
> _is_package_repo_signed
>     repo = self.yumbase.repos.getRepo(pkg.repoid)
>   File : /usr/lib/python2.6/site-packages/yum/repos.py, line 121, in getRepo
>     'Error getting repository data for $s, repository not found' $ (repoid)    

the same problem occurs with me