Bug 1996905 - SELinux is preventing ModemManager from module_request access on the system labeled kernel_t.
Summary: SELinux is preventing ModemManager from module_request access on the system l...
Keywords:
Status: CLOSED DUPLICATE of bug 2001057
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 35
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-08-23 23:47 UTC by Adam Williamson
Modified: 2021-09-21 19:09 UTC (History)
7 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2021-09-21 19:09:44 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Adam Williamson 2021-08-23 23:47:59 UTC
Additional Information:
Source Context                system_u:system_r:modemmanager_t:s0
Target Context                system_u:system_r:kernel_t:s0
Target Objects                Unknown [ system ]
Source                        ModemManager
Source Path                   ModemManager
Port                          <Unknown>
Host                          <Unknown>
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-34.16-1.fc35.noarch
Local Policy RPM              selinux-policy-targeted-34.16-1.fc35.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Host Name                     fedora
Platform                      Linux fedora 5.14.0-0.rc6.46.fc35.x86_64 #1 SMP
                              Mon Aug 16 20:02:52 UTC 2021 x86_64 x86_64
Alert Count                   1
First Seen                    2021-08-23 16:05:50 PDT
Last Seen                     2021-08-23 16:05:50 PDT
Local ID                      ce875947-6dd3-43f3-88d7-b1da867b337c

Raw Audit Messages
type=AVC msg=audit(1629759950.322:164): avc:  denied  { module_request } for  pid=769 comm="ModemManager" kmod="net-pf-42" scontext=system_u:system_r:modemmanager_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1


Hash: ModemManager,modemmanager_t,kernel_t,system,module_request

Appears on first boot of a freshly installed Fedora 35 Workstation VM. Reporting manually as sealert/setroubleshoot seem to be broken and show no alerts. Booted with permissive to get system to boot and show all alerts (without permissive, it doesn't make it to gnome-initial-setup).

Comment 1 Zdenek Pytela 2021-09-21 19:09:44 UTC

*** This bug has been marked as a duplicate of bug 2001057 ***


Note You need to log in before you can comment on or make changes to this bug.