Contexte source system_u:system_r:svirt_t:s0:c773,c790 Contexte cible system_u:system_r:virtd_t:s0-s15:c0.c1023 Objets du contexte /dev/net/tun [ fd ] source qemu-kvm Chemin de la source /usr/bin/qemu-kvm Port <Inconnu> Hôte host01 Paquetages RPM source qemu-system-x86-0.11.0-13.fc12 Paquetages RPM cible Politique RPM selinux-policy-3.6.32-118.fc12 Selinux activé True Type de politique mls Mode strict Permissive Nom du plugin catchall Nom de l'hôte host01 Plateforme Linux host01 2.6.32.16-150.fc12.x86_64 #1 SMP Sat Jul 24 05:19:12 UTC 2010 x86_64 x86_64 Compteur d'alertes 1 Première alerte Tue Aug 10 12:09:04 2010 Dernière alerte Tue Aug 10 12:09:04 2010 ID local 829a4f2e-e89f-4d1e-a7ac-5dc998db88ed Numéros des lignes Messages d'audit bruts node=host01 type=AVC msg=audit(1281434944.801:37734): avc: denied { use } for pid=2476 comm="qemu-kvm" path="/dev/net/tun" dev=devtmpfs ino=10476 scontext=system_u:system_r:svirt_t:s0:c773,c790 tcontext=system_u:system_r:virtd_t:s0-s15:c0.c1023 tclass=fd node=host01 type=SYSCALL msg=audit(1281434944.801:37734): arch=c000003e syscall=0 success=yes exit=62 a0=14 a1=134443c a2=11000 a3=7fff62abcff0 items=0 ppid=1 pid=2476 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c773,c790 key=(null)
Miroslav, grab the mls calls out of virt.te in F13.
*** Bug 622746 has been marked as a duplicate of this bug. ***
Fixed in selinux-policy-3.6.32-121.fc12
selinux-policy-3.6.32-121.fc12 has been submitted as an update for Fedora 12. http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-121.fc12
selinux-policy-3.6.32-121.fc12 has been pushed to the Fedora 12 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/selinux-policy-3.6.32-121.fc12
selinux-policy-3.6.32-121.fc12 has been pushed to the Fedora 12 stable repository. If problems still persist, please make note of it in this bug report.