Bug 539996

Summary:

SELinux is preventing memcached (memcached_t) "read" memcached_t.

Detailed Description:

[SELinux is in permissive mode. This access was not denied.]

SELinux denied access requested by memcached. It is not expected that this
access is required by memcached and this access may signal an intrusion attempt.
It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Allowing Access:

You can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.

Additional Information:

Source Context                unconfined_u:system_r:memcached_t:s0
Target Context                unconfined_u:system_r:memcached_t:s0
Target Objects                None [ netlink_route_socket ]
Source                        memcached
Source Path                   /usr/bin/memcached
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           memcached-1.2.8-1.fc11
Target RPM Packages           
Policy RPM                    selinux-policy-3.5.13-64.fc10
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Plugin Name                   catchall
Host Name                     (removed)
Platform                      Linux (removed)
                              2.6.27.25-170.2.72.fc10.x86_64 #1 SMP Sun Jun 21
                              18:39:34 EDT 2009 x86_64 x86_64
Alert Count                   1
First Seen                    Mon 06 Jul 2009 11:54:02 PM CEST
Last Seen                     Mon 06 Jul 2009 11:54:02 PM CEST
Local ID                      5585cdb2-5550-4848-b72a-8c2deb443a52
Line Numbers                  

Raw Audit Messages            

node=(removed) type=AVC msg=audit(1246917242.768:273): avc:  denied  { read } for  pid=21259 comm="memcached" scontext=unconfined_u:system_r:memcached_t:s0 tcontext=unconfined_u:system_r:memcached_t:s0 tclass=netlink_route_socket

node=(removed) type=SYSCALL msg=audit(1246917242.768:273): arch=c000003e syscall=47 success=yes exit=284 a0=1c a1=7fff5d359d50 a2=0 a3=0 items=0 ppid=1 pid=21259 auid=0 uid=493 gid=490 euid=493 suid=493 fsuid=493 egid=490 sgid=490 fsgid=490 tty=(none) ses=2 comm="memcached" exe="/usr/bin/memcached" subj=unconfined_u:system_r:memcached_t:s0 key=(null)



Hash String generated from  selinux-policy-3.5.13-64.fc10,catchall,memcached,memcached_t,memcached_t,netlink_route_socket,read
audit2allow suggests:

#============= memcached_t ==============
allow memcached_t self:netlink_route_socket read;