Hide Forgot
Description of problem: I get selinux avc denials while trying to connect to the internet using my USB mobile broadband connection. I noticed more bugs related to ppd, probably filed from my system using sealert, but I wasn't sure where to upload what files. Version-Release number of selected component (if applicable): [root@ankur ~]# rpm -q selinux-policy selinux-policy-3.9.16-26.fc15.noarch How reproducible: If you try to use this USB broadband device with a pristine selinux-policy, you get multiple avc denials sequentially (first read, unlink, open) Steps to Reproduce: 1. Make sure you have a unaltered selinux-policy 2. insert the usb device 3. try to connect to the internet using network manager Actual results: AVC denials which need you to generate policies to get it to work Expected results: Should work out of the box :) Additional info: I had restored /var/lock using restorecon (using the generated policies give me other errors which I'll file bugs against when I see them again), and reinserted the usb device to connect to the internet. I'm attaching 3 generated policies that were required.
Created attachment 506110 [details] policy generated for "read"
Created attachment 506111 [details] policy generated for "unlink"
Created attachment 506112 [details] policy generated for "open"
These were the policies generated this time. I hope they have enough info for you to solve the issue. Please let me know if you need any other info. I will be more than happy to provide it. Thank you :) Ankur
I would rather have the raw AVC's that you used to generate the policy or the te files that were generated.
Oh! I'll generate them again and add them tonight then. Thanks, Ankur
the following broke my mobile broadband today: selinux-policy-doc-3.9.16-30.fc15.noarch selinux-policy-minimum-3.9.16-30.fc15.noarch selinux-policy-mls-3.9.16-30.fc15.noarch selinux-policy-targeted-3.9.16-30.fc15.noarch SELinux is preventing /usr/sbin/pppd from read access on the lnk_file /var/lock SELinux is preventing /usr/sbin/pppd from search access on the directory lock The first error had been solved before: https://bugzilla.redhat.com/show_bug.cgi?id=699240
Hello, I'm having some trouble with sealert. I've filed a bug. I'll provide the necessary info once it's fixed. https://bugzilla.redhat.com/show_bug.cgi?id=716626 Thanks, Ankur
the original issue should be fixed. I am closing the bug.