Bug 718495

Summary: selinux blocks pppd-over-rfcomm from creating lock file.
Product: [Fedora] Fedora Reporter: Gilboa Davara <gilboad>
Component: selinux-policy-targetedAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Ben Levenson <benl>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 15CC: dwalsh
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-07-11 10:22:46 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Gilboa Davara 2011-07-03 15:12:13 UTC
I'm trying to connect to the Internet using NetworkManager -> bluetooth -> cellphone setup.
With SELinux enabled, NM simply times out.

Looking at the messages, I see the following message(s):
pppd[2646]: pppd 2.4.5 started by root, uid 0
pppd[2646]: Can't create lock file /var/lock/ppp/LCK..rfcomm0: Permission denied
pppd[2646]: Exit.

... And in audit.log:
type=AVC msg=audit(1309701999.895:836): avc:  denied  { search } for  pid=2134 comm="pppd" name="lock" dev=tmpfs ino=6241 scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:object_r:var_lock_t:s0 tclass=dir

Beyond that, I can't seem to get a valid sealert ID to get a better description.
Disabling SELinux (setenforce 0), solves the problem.

Versions:
selinux-policy-targeted-3.9.16-30.fc15.noarch
NetworkManager-0.8.9997-4.git20110620.fc15.x86_64

- Gilboa

Comment 1 Daniel Walsh 2011-07-05 19:57:25 UTC
Fixed in selinux-policy-3.9.16-31

Comment 2 Gilboa Davara 2011-07-07 09:16:28 UTC
Just checked with 16-32 (from -testing) and it seems to work just fine.

Thanks!
- Gilboa