Summary SELinux is preventing /usr/sbin/irqbalance (irqbalance_t) "search" access to net (proc_net_t). ... Additional Information: Source Context: system_u:system_r:irqbalance_t Target Context: system_u:object_r:proc_net_t Target Objects: net [ dir ] Affected RPM Packages: irqbalance-0.55-2.fc6 [application] Policy RPM: selinux-policy-2.4.6-7.fc6 Selinux Enabled: True Policy Type: targeted MLS Enabled: True Enforcing Mode: Enforcing Plugin Name: plugins.disable_trans Host Name: icarus Platform: Linux icarus 2.6.18-1.2849.fc6 #1 SMP Fri Nov 10 12:34:46 EST 2006 x86_64 x86_64 Alert Count: 76 Line Numbers: Raw Audit Messages: avc: denied { search } for comm="irqbalance" dev=proc egid=0 euid=0 exe="/usr/sbin/irqbalance" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="net" pid=2186 scontext=system_u:system_r:irqbalance_t:s0 sgid=0 subj=system_u:system_r:irqbalance_t:s0 suid=0 tclass=dir tcontext=system_u:object_r:proc_net_t:s0 tty=(none) uid=0
Created attachment 143692 [details] irqbalance targeted selilnux policy here is the policy file for irqbalance to allow it to access the proc files it needs to properly balance irq's
Fixed in selinux-policy-2.4.6-13
Where can we find 2.4.6-13? I don't see it in updates-testing. Thanks, Andy.
Sorry, I forgot to press the submit to forwarding button. Should be there tonight. I have also made it available on http://people.redhat.com/dwalsh/SELinux/FC6
*** Bug 220178 has been marked as a duplicate of this bug. ***
*** Bug 220334 has been marked as a duplicate of this bug. ***
*** Bug 224194 has been marked as a duplicate of this bug. ***
Fixed in current release