Bug 718495 - selinux blocks pppd-over-rfcomm from creating lock file.
Summary: selinux blocks pppd-over-rfcomm from creating lock file.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: 15
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-03 15:12 UTC by Gilboa Davara
Modified: 2011-07-11 10:22 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-07-11 10:22:46 UTC
Type: ---

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Gilboa Davara 2011-07-03 15:12:13 UTC 
I'm trying to connect to the Internet using NetworkManager -> bluetooth -> cellphone setup.
With SELinux enabled, NM simply times out.

Looking at the messages, I see the following message(s):
pppd[2646]: pppd 2.4.5 started by root, uid 0
pppd[2646]: Can't create lock file /var/lock/ppp/LCK..rfcomm0: Permission denied
pppd[2646]: Exit.

... And in audit.log:
type=AVC msg=audit(1309701999.895:836): avc:  denied  { search } for  pid=2134 comm="pppd" name="lock" dev=tmpfs ino=6241 scontext=system_u:system_r:pppd_t:s0 tcontext=system_u:object_r:var_lock_t:s0 tclass=dir

Beyond that, I can't seem to get a valid sealert ID to get a better description.
Disabling SELinux (setenforce 0), solves the problem.

Versions:
selinux-policy-targeted-3.9.16-30.fc15.noarch
NetworkManager-0.8.9997-4.git20110620.fc15.x86_64

- Gilboa
Comment 1 Daniel Walsh 2011-07-05 19:57:25 UTC 
Fixed in selinux-policy-3.9.16-31
Comment 2 Gilboa Davara 2011-07-07 09:16:28 UTC 
Just checked with 16-32 (from -testing) and it seems to work just fine.

Thanks!
- Gilboa
Note You need to log in before you can comment on or make changes to this bug.