Help: No internet connection
H. Willstrand
h.willstrand at gmail.com
Sun Dec 13 23:21:41 UTC 2009
On Mon, Dec 14, 2009 at 12:07 AM, <simon.schneebeli at okko.org> wrote:
>
>>>>
>>>
>>> What's that magic trick? I get to
>>> http://fedoraproject.org/wiki/IndexAdmin
>>> and can surf around there without a problem. Magic?
>>>
>>
>> It's seams to be an DNS issue. FF fails to lookup the IP-number.
>> During the installation of Fedora, did you got any errors?
>>
>> //HW
>
> I'm not aware of any errors during the installation.
>
> However, in SELinux Troubleshooter, I have this error message that might be
> linked to this problem:
>
>
> Summary:
>
> SELinux is preventing /bin/find "getattr" access to
> /var/lib/misc/prelink.full.
>
> Detailed Description:
>
> [find has a permissive type (prelink_cron_system_t). This access was not
> denied.]
>
> SELinux denied access requested by find. /var/lib/misc/prelink.full may be a
> mislabeled. /var/lib/misc/prelink.full default SELinux type is
> prelink_var_lib_t,
> but its current type is cron_var_lib_t. Changing this file back to the
> default
> type, may fix your problem.
>
> File contexts can be assigned to a file in the following ways.
>
> * Files created in a directory receive the file context of the parent
> directory by default.
> * The SELinux policy might override the default label inherited from the
> parent directory by specifying a process running in context A which
> creates
> a file in a directory labeled B will instead create the file with label
> C.
> An example of this would be the dhcp client running with the dhclient_t
> type
> and creating a file in the directory /etc. This file would normally
> receive
> the etc_t type due to parental inheritance but instead the file is
> labeled
> with the net_conf_t type because the SELinux policy specifies this.
> * Users can change the file context on a file using tools such as chcon, or
> restorecon.
>
> This file could have been mislabeled either by user error, or if an normally
> confined application was run under the wrong domain.
>
> However, this might also indicate a bug in SELinux because the file should
> not
> have been labeled with this type.
>
> If you believe this is a bug, please file a bug report against this package.
>
> Allowing Access:
>
> You can restore the default system context to this file by executing the
> restorecon command. restorecon '/var/lib/misc/prelink.full', if this file is
> a
> directory, you can recursively restore using restorecon -R
> '/var/lib/misc/prelink.full'.
>
> Fix Command:
>
> /sbin/restorecon '/var/lib/misc/prelink.full'
>
> Additional Information:
>
> Source Context
> system_u:system_r:prelink_cron_system_t:s0-s0:c0.c
> 1023
> Target Context system_u:object_r:cron_var_lib_t:s0
> Target Objects /var/lib/misc/prelink.full [ file ]
> Source find
> Source Path /bin/find
> Port <Unknown>
> Host sangam
> Source RPM Packages findutils-4.4.2-4.fc12
> Target RPM Packages prelink-0.4.2-4.fc12
> Policy RPM selinux-policy-3.6.32-55.fc12
> Selinux Enabled True
> Policy Type targeted
> Enforcing Mode Enforcing
> Plugin Name restorecon
> Host Name sangam
> Platform Linux sangam 2.6.31.6-166.fc12.i686.PAE #1 SMP
> Wed
> Dec 9 11:00:30 EST 2009 i686 i686
> Alert Count 1
> First Seen Sun 13 Dec 2009 01:25:21 PM CET
> Last Seen Sun 13 Dec 2009 01:25:21 PM CET
> Local ID 3eb8c967-bfe5-483b-89c7-9773eacbb4cf
> Line Numbers
>
> Raw Audit Messages
>
> node=sangam type=AVC msg=audit(1260707121.819:25385): avc: denied {
> getattr } for pid=11599 comm="find" path="/var/lib/misc/prelink.full"
> dev=dm-0 ino=2097510
> scontext=system_u:system_r:prelink_cron_system_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:cron_var_lib_t:s0 tclass=file
>
> node=sangam type=SYSCALL msg=audit(1260707121.819:25385): arch=40000003
> syscall=300 success=yes exit=0 a0=ffffff9c a1=96c3704 a2=96c36a4 a3=100
> items=0 ppid=11598 pid=11599 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=(none) ses=4 comm="find" exe="/bin/find"
> subj=system_u:system_r:prelink_cron_system_t:s0-s0:c0.c1023 key=(null)
>
>
>
>
>
No, I don't think this is relevant...
More information about the fedora-list
mailing list