Bug 243778 – Doesn't allow ifdown to signal dhclient

Bug 243778 - Doesn't allow ifdown to signal dhclient

Summary:	Doesn't allow ifdown to signal dhclient

Status:	CLOSED CURRENTRELEASE

Aliases:	None

Product:	Fedora
Classification:	Fedora
Component:	selinux-policy-targeted (Show other bugs)
Sub Component:
Version:	7
Hardware:	All Linux

Priority	low Severity low
Target Milestone:	---
Target Release:	---
Assigned To:	Daniel Walsh
QA Contact:	Ben Levenson
Docs Contact:

URL:
Whiteboard:
Keywords:

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2007-06-11 16:54 EDT by Bill Nottingham
Modified:	2014-03-16 23:07 EDT (History)
CC List:	1 user (show)

See Also:
Fixed In Version:	Current
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2007-08-22 10:10:29 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Bill Nottingham 2007-06-11 16:54:54 EDT

Description of problem:

SELinux is preventing ifdown-eth (udev_t) "signal" to (dhcpc_t).

Detailed Description
SELinux denied access requested by ifdown-eth. It is not expected that this
access is required by ifdown-eth and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.

Either:
a) it needs to allow this as-is
b) udev needs to transition to the proper domain when calling ifdown

Version-Release number of selected component (if applicable):

selinux-policy-targeted-2.6.4-13.fc7

Comment 1 Daniel Walsh 2007-06-12 11:17:20 EDT

Fixed in selinux-policy-2.6.4-15

Why does udev do this and not hal?

Comment 2 Bill Nottingham 2007-06-12 11:59:16 EDT

It's just the way it's always been done, I suppose. The 'ifup' bits seem to work
from udev.

Comment 3 Daniel Walsh 2007-08-22 10:10:29 EDT

Closing as fixes are in the current release

Note You need to log in before you can comment on or make changes to this bug.