Bug 690655

Summary: NetworkManager can't update resolv.conf?
Product: [Fedora] Fedora Reporter: Bill Nottingham <notting>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: dcbw, dwalsh, mgrepl, rvokal
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-04-17 09:03:32 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Bill Nottingham 2011-03-24 23:28:19 UTC
Description of problem:

time->Thu Mar 24 19:25:43 2011
type=SYSCALL msg=audit(1301009143.860:719): arch=c000003e syscall=82 success=no exit=-13 a0=2611800 a1=2671c00 a2=3bb4d98238 a3=0 items=0 ppid=1 pid=25273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1301009143.860:719): avc:  denied  { unlink } for  pid=25273 comm="NetworkManager" name="resolv.conf" dev=sda2 ino=2450406 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:etc_t:s0 tclass=file

Version-Release number of selected component (if applicable):

NetworkManager-0.8.997-1.fc15.x86_64
selinux-policy-targeted-3.9.16-6.fc15.noarch

How reproducible:

Not sure, just noticed it.

Comment 1 Daniel Walsh 2011-03-25 11:57:22 UTC
The question is who created this file.  It is labeled incorrectly.

restorecon /etc/resolv.conf

Will fix it.

Is this a fresh install?  Did you edit the file by hand?

Any weird programs running as unconfined_t?  ps -eZ | grep NetworkManager

Comment 2 Bill Nottingham 2011-03-25 14:53:49 UTC
(In reply to comment #1)
> Is this a fresh install?  Did you edit the file by hand?

No and no.

> Any weird programs running as unconfined_t?  ps -eZ | grep NetworkManager

Nothing obvious there. I suppose I should just wait and see if it reoccurs.

Comment 3 Daniel Walsh 2011-04-17 09:03:32 UTC
Since it has not happened again, I am closeing this bug, reopen if it happens again.