| Summary: | SELinux is preventing /sbin/ifconfig from read, open access on the plik /sbin/ifconfig. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | doctore |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | dominick.grift, dwalsh, mgrepl |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | setroubleshoot_trace_hash:461c4dfb21526814b1c9b564af25694d2872a3238af3f5423e6236087f60c4b5 | ||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-02-10 08:55:54 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
Fixed in selinux-policy-3.9.16-47.fc15 |
SELinux is preventing /sbin/ifconfig from read, open access on the plik /sbin/ifconfig. ***** Plugin catchall (100. confidence) suggests *************************** If aby ifconfig powinno mieć domyślnie read open dostęp do ifconfig file. Then proszę to zgłosić jako błąd. Można utworzyć lokalny moduł polityki, aby umożliwić ten dostęp. Do można tymczasowo zezwolić na ten dostęp wykonując polecenia: # grep ifconfig /var/log/audit/audit.log | audit2allow -M moja_polityka # semodule -i moja_polityka.pp Additional Information: Source Context system_u:system_r:colord_t:s0-s0:c0.c1023 Target Context system_u:object_r:ifconfig_exec_t:s0 Target Objects /sbin/ifconfig [ file ] Source ifconfig Source Path /sbin/ifconfig Port <Nieznane> Host (removed) Source RPM Packages net-tools-1.60-117.fc15 Target RPM Packages net-tools-1.60-117.fc15 Policy RPM selinux-policy-3.9.16-44.fc15 Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 2.6.40.6-0.fc15.x86_64 #1 SMP Tue Oct 4 00:39:50 UTC 2011 x86_64 x86_64 Alert Count 1 First Seen śro, 2 lis 2011, 23:08:59 Last Seen śro, 2 lis 2011, 23:08:59 Local ID 79ab33af-cdb3-45bd-a954-c311da2da5aa Raw Audit Messages type=AVC msg=audit(1320271739.144:31): avc: denied { read open } for pid=1215 comm="sh" name="ifconfig" dev=dm-1 ino=9700 scontext=system_u:system_r:colord_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file type=AVC msg=audit(1320271739.144:31): avc: denied { execute_no_trans } for pid=1215 comm="sh" path="/sbin/ifconfig" dev=dm-1 ino=9700 scontext=system_u:system_r:colord_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file type=SYSCALL msg=audit(1320271739.144:31): arch=x86_64 syscall=execve success=yes exit=0 a0=23a3870 a1=23a38b0 a2=23a2a50 a3=0 items=0 ppid=1211 pid=1215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=ifconfig exe=/sbin/ifconfig subj=system_u:system_r:colord_t:s0-s0:c0.c1023 key=(null) Hash: ifconfig,colord_t,ifconfig_exec_t,file,read,open audit2allow #============= colord_t ============== allow colord_t ifconfig_exec_t:file { read open execute_no_trans }; audit2allow -R #============= colord_t ============== allow colord_t ifconfig_exec_t:file { read open execute_no_trans };