Description of problem: Asterisk unable to open TCP SIP sockets Version-Release number of selected component (if applicable): asterisk-1.6.2.6-1.fc13.x86_64 selinux-policy-3.7.16-2.fc13.noarch How reproducible: Always Steps to Reproduce: 1. Enable TCP SIP sockets in the Asterisk SIP configuration 2. Start Asterisk Actual results: Asterisk cannot open SIP sockets Expected results: Asterisk can open SIP sockets Additional info: Here is the AVC I am getting: time->Mon Apr 5 08:55:53 2010 type=SYSCALL msg=audit(1270475753.942:12806): arch=c000003e syscall=42 success=yes exit=0 a0=11 a1=7ff5180377d8 a2=10 a3=75babc items=0 ppid=1 pid=18897 auid=500 uid=494 gid=486 euid=494 suid=494 fsuid=494 egid=486 sgid=486 fsgid=486 tty=(none) ses=56 comm="asterisk" exe=2F7573722F7362696E2F617374657269736B202864656C6574656429 subj=unconfined_u:system_r:asterisk_t:s0 key=(null) type=AVC msg=audit(1270475753.942:12806): avc: denied { name_connect } for pid=18897 comm="asterisk" dest=5060 scontext=unconfined_u:system_r:asterisk_t:s0 tcontext=system_u:object_r:sip_port_t:s0 tclass=tcp_socket
Does asterisk also listen on this tcp port?
Fixed in selinux-policy-3.7.17-6.fc13.noarch Miroslav back port to F12 also. corenet_tcp_bind_sip_port(asterisk_t) corenet_tcp_connect_sip_port(asterisk_t)
Yes Asterisk needs to listen on the port as well.
selinux-policy-3.7.17-6.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/selinux-policy-3.7.17-6.fc13
selinux-policy-3.7.19-2.fc13 has been submitted as an update for Fedora 13. http://admin.fedoraproject.org/updates/selinux-policy-3.7.19-2.fc13
selinux-policy-3.7.19-2.fc13 has been pushed to the Fedora 13 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/selinux-policy-3.7.19-2.fc13
selinux-policy-3.7.19-2.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.