<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body text="#000000" bgcolor="#ffffff">
On 09/28/2009 03:50 AM, chenh wrote:
<blockquote
cite="mid:10547869.697791254102612911.JavaMail.coremail@bj126app25.126.com"
type="cite">
<div><br>
Everytime I use adsl connection, AVC alerts: "SELinux is preventing
consoletype (consoletype_t) "read write" pppd_t. " I typed "audit2allow
-a" and saw:<br>
<br>
#============= alsa_t ==============<br>
allow alsa_t file_t:file read;<br>
<br>
#============= consoletype_t ==============<br>
allow consoletype_t file_t:file read;<br>
allow consoletype_t pppd_t:packet_socket { read write };<br>
<br>
#============= dmesg_t ==============<br>
allow dmesg_t file_t:file read;<br>
<br>
#============= hwclock_t ==============<br>
allow hwclock_t file_t:file read;<br>
<br>
#============= ifconfig_t ==============<br>
allow ifconfig_t file_t:file read;<br>
<br>
#============= mount_t ==============<br>
allow mount_t file_t:file unlink;<br>
<br>
#============= setroubleshootd_t ==============<br>
allow setroubleshootd_t locate_var_lib_t:file read;<br>
<br>
</div>
</blockquote>
<br>
Looks like your machine is mislabeled. Could you try to execute:<br>
<br>
# fixfiles restore<br>
# reboot<br>
<br>
What is your version of selinux-policy.<br>
# rpm -q selinux-policy selinux-policy-targeted<br>
<br>
<br>
<blockquote
cite="mid:10547869.697791254102612911.JavaMail.coremail@bj126app25.126.com"
type="cite">
<div>There're two rule about consoletype above. Is it safe to add
them using audit2allow? Thanks!<br>
</div>
<br>
<br>
<span title="neteasefooter">
<hr><a moz-do-not-send="true"
href="http://news.163.com/madeinchina/index.html?from=mailfooter">"中国制
造",讲述中国60年往事</a>
</span>
<pre wrap="">
<hr size="4" width="90%">
--
fedora-selinux-list mailing list
<a class="moz-txt-link-abbreviated" href="mailto:fedora-selinux-list@redhat.com">fedora-selinux-list@redhat.com</a>
<a class="moz-txt-link-freetext" href="https://www.redhat.com/mailman/listinfo/fedora-selinux-list">https://www.redhat.com/mailman/listinfo/fedora-selinux-list</a></pre>
</blockquote>
<br>
<br>
<br>
<br>
<br>
</body>
</html>