Bug 875198

Created attachment 641783 [details]
File: type

Created attachment 641784 [details]
File: hashmarkername

Could you attach also AVC msg? Thank you.

It wants me to type the following in bash:

# grep GoogleTalkPlugi /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c
                              0.c1023
Target Context                system_u:object_r:msnp_port_t:s0
Target Objects                 [ tcp_socket ]
Source                        GoogleTalkPlugi
Source Path                   /opt/google/talkplugin/GoogleTalkPlugin
Port                          1863
Host                          localhost.localdomain
Source RPM Packages           google-talkplugin-3.10.2.0-1.x86_64
Target RPM Packages           
Policy RPM                    selinux-policy-3.10.0-156.fc17.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     localhost.localdomain
Platform                      Linux localhost.localdomain 3.6.5-1.fc17.x86_64 #1
                              SMP Wed Oct 31 19:37:18 UTC 2012 x86_64 x86_64
Alert Count                   1
First Seen                    2012-11-13 20:18:33 CET
Last Seen                     2012-11-13 20:18:33 CET
Local ID                      f0bcc355-47a2-4b5c-8876-0ec10b8f2eca

Raw Audit Messages
type=AVC msg=audit(1352834313.782:57): avc:  denied  { name_connect } for  pid=1875 comm="GoogleTalkPlugi" dest=1863 scontext=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:msnp_port_t:s0 tclass=tcp_socket


type=SYSCALL msg=audit(1352834313.782:57): arch=x86_64 syscall=connect success=no exit=EACCES a0=42 a1=7fa087ffdd70 a2=10 a3=f0 items=0 ppid=1 pid=1875 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 tty=(none) ses=1 comm=GoogleTalkPlugi exe=/opt/google/talkplugin/GoogleTalkPlugin subj=unconfined_u:unconfined_r:mozilla_plugin_t:s0-s0:c0.c1023 key=(null)

Hash: GoogleTalkPlugi,mozilla_plugin_t,msnp_port_t,tcp_socket,name_connect

audit2allow

#============= mozilla_plugin_t ==============
allow mozilla_plugin_t msnp_port_t:tcp_socket name_connect;

audit2allow -R

#============= mozilla_plugin_t ==============
allow mozilla_plugin_t msnp_port_t:tcp_socket name_connect;

I just checked in a fix for this in F18, we should allow it.

2074c9633cc14a2d093ff3fd9863d9c33cb3ebd1

Added.

commit 703ee7cab2edd5eea259a962566ea61db1094a25
Author: Miroslav Grepl <mgrepl>
Date:   Thu Nov 15 10:58:14 2012 +0100

    Allow chrome and mozilla plugin to connect to msnp ports

selinux-policy-3.10.0-161.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/selinux-policy-3.10.0-161.fc17

Package selinux-policy-3.10.0-161.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.10.0-161.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-18787/selinux-policy-3.10.0-161.fc17
then log in and leave karma (feedback).

selinux-policy-3.10.0-161.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.