Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: I'm trying to run ejaberrd, but during startup it gets shot down by SELinux. I've no idea, really. All I can add, is that I've disabled most transports and enabled PAM authentication: {listen, [ {5222, ejabberd_c2s, [ {access, c2s}, {shaper, c2s_shaper}, {max_stanza_size, 65536}, %%zlib, starttls, {certfile, "/etc/ejabberd/ejabberd.pem"} ]}, {5280, ejabberd_http, [ %%{request_handlers, %% [ %% {["pub", "archive"], mod_http_fileserver} %% ]}, %%captcha, http_bind, http_poll, web_admin ]} ]}. {auth_method, pam}. {pam_service, "login"}. SELinux is preventing /usr/lib64/erlang/erts-5.10.1/bin/beam.smp from 'name_connect' accesses on the tcp_socket . ***** Plugin catchall (100. confidence) suggests *************************** If you believe that beam.smp should be allowed name_connect access on the tcp_socket by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep beam.smp /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context system_u:system_r:rabbitmq_beam_t:s0 Target Context system_u:object_r:ephemeral_port_t:s0 Target Objects [ tcp_socket ] Source beam.smp Source Path /usr/lib64/erlang/erts-5.10.1/bin/beam.smp Port 34560 Host (removed) Source RPM Packages erlang-erts-R16B-0.3.fc19.x86_64 Target RPM Packages Policy RPM selinux-policy-3.12.1-66.fc19.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name (removed) Platform Linux (removed) 3.9.5-301.fc19.x86_64 #1 SMP Tue Jun 11 19:39:38 UTC 2013 x86_64 x86_64 Alert Count 1 First Seen 2013-08-02 17:47:47 MSK Last Seen 2013-08-02 17:47:47 MSK Local ID 6288b03e-02bf-4e4f-9588-44fefa54e9d5 Raw Audit Messages type=AVC msg=audit(1375451267.291:514): avc: denied { name_connect } for pid=27836 comm="beam.smp" dest=34560 scontext=system_u:system_r:rabbitmq_beam_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket type=SYSCALL msg=audit(1375451267.291:514): arch=x86_64 syscall=connect success=no exit=EACCES a0=b a1=7fe435e01e58 a2=10 a3=1 items=0 ppid=27809 pid=27836 auid=4294967295 uid=991 gid=989 euid=991 suid=991 fsuid=991 egid=989 sgid=989 fsgid=989 ses=4294967295 tty=(none) comm=beam.smp exe=/usr/lib64/erlang/erts-5.10.1/bin/beam.smp subj=system_u:system_r:rabbitmq_beam_t:s0 key=(null) Hash: beam.smp,rabbitmq_beam_t,ephemeral_port_t,tcp_socket,name_connect Additional info: reporter: libreport-2.1.6 hashmarkername: setroubleshoot kernel: 3.9.5-301.fc19.x86_64 type: libreport
*** This bug has been marked as a duplicate of bug 992920 ***