Bug 717445

Summary: SELinux doesn't allow pppd to create lock files in /var/lock/ppp
Product: [Fedora] Fedora Reporter: Andreas Schneider <asn>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: dominick.grift, dwalsh, jskala, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-06-29 08:03:30 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Andreas Schneider 2011-06-28 20:44:46 UTC
Description of problem:

SELinux doesn't allow pppd to create lock files in /var/lock/ppp

Version-Release number of selected component (if applicable):

ppp-2.4.5-17.fc15.x86_64

How reproducible:

Always

Steps to Reproduce:
1. Try to go online with a umts stick

audit.log:

type=AVC msg=audit(1309293359.924:62): avc:  denied  { getattr } for  pid=3438 comm="pppd" path="/root/.ppprc" dev=dm-0 ino=397511 scontext=system_u:system_r:pppd_t:s0 tcontext=unconfined_u:object_r:admin_home_t:s0 tclass=file
type=SYSCALL msg=audit(1309293359.924:62): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff2648b7d0 a2=7fff2648b7d0 a3=0 items=0 ppid=885 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pppd" exe="/usr/sbin/pppd" subj=system_u:system_r:pppd_t:s0 key=(null)
type=AVC msg=audit(1309293359.937:63): avc:  denied  { search } for  pid=3438 comm="pppd" name="lock" dev=tmpfs ino=1254 scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:object_r:var_lock_t:s0 tclass=dir
type=SYSCALL msg=audit(1309293359.937:63): arch=c000003e syscall=2 success=yes exit=11 a0=7fd6a09ec080 a1=800c2 a2=1a4 a3=7fff2648ae30 items=0 ppid=885 pid=3438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="pppd" exe="/usr/sbin/pppd" subj=system_u:system_r:pppd_t:s0 key=(null)

Comment 1 Miroslav Grepl 2011-06-29 08:03:30 UTC

*** This bug has been marked as a duplicate of bug 717161 ***