Description of problem: When SELinux is set to enforcing in el 5.3 with latest updates, I can't dial in using my ADSL connection. This only happens if there is another ethernet connection active when I am dialing in. Output: Apr 25 14:29:31 dialinproxy kernel: eth1: setting full-duplex. Apr 25 14:29:31 dialinproxy kernel: type=1400 audit(1240662571.215:4): avc: denied { read write } for pid=2951 comm="pppd" name="pppd2.tdb" dev=dm-0 ino=7209197 scontext=root:system_r:pppd_t:s0 tcontext=root:object_r:var_run_t:s0 tclass=file Apr 25 14:29:31 dialinproxy pppd[2951]: Warning: couldn't open ppp database /var/run/pppd2.tdb Apr 25 14:29:31 dialinproxy pppd[2951]: pppd 2.4.4 started by root, uid 0 Apr 25 14:29:31 dialinproxy pppd[2952]: Fatal signal 11 Apr 25 14:29:31 dialinproxy pppd[2952]: Exit. Apr 25 14:29:31 dialinproxy pppd[2951]: Couldn't get channel number: Input/output error Apr 25 14:29:31 dialinproxy pppd[2951]: Exit. Apr 25 14:29:31 dialinproxy adsl-connect: ADSL connection lost; attempting re-connection. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: New relevant interface eth1.IPv6 for mDNS. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: Joining mDNS multicast group on interface eth1.IPv6 with address fe80::201:2ff:fedb:11ed. Apr 25 14:29:32 dialinproxy avahi-daemon[1939]: Registering new address record for fe80::201:2ff:fedb:11ed on eth1. Apr 25 14:29:36 dialinproxy kernel: type=1400 audit(1240662576.266:5): avc: denied { read write } for pid=2960 comm="pppd" name="pppd2.tdb" dev=dm-0 ino=7209197 scontext=root:system_r:pppd_t:s0 tcontext=root:object_r:var_run_t:s0 tclass=file Apr 25 14:29:36 dialinproxy pppd[2960]: Warning: couldn't open ppp database /var/run/pppd2.tdb Apr 25 14:29:36 dialinproxy pppd[2960]: pppd 2.4.4 started by root, uid 0 Apr 25 14:29:36 dialinproxy pppd[2961]: Fatal signal 11 Apr 25 14:29:36 dialinproxy pppd[2961]: Exit. Apr 25 14:29:36 dialinproxy pppd[2960]: Couldn't get channel number: Input/output error Apr 25 14:29:36 dialinproxy pppd[2960]: Exit. selinux-policy-2.4.6-203.el5 rp-pppoe-3.5-32.1
This should be fixed in the 5.4 selinux policy. Preview is available on http://people.redhat.com/dwalsh/SELinux/RHEL5