ifconfig/pipefs avc messages.

dragoran dragoran at feuerpokemon.de
Sun Aug 28 11:15:50 UTC 2005


I have found this messages in /var/log/audit/audit.log:

> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11205] dev=pipefs ino=11205 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { read } for  
> pid=3342 comm="ifconfig" name=[11205] dev=pipefs ino=11205 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11203] dev=pipefs ino=11203 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { read } for  
> pid=3342 comm="ifconfig" name=[11203] dev=pipefs ino=11203 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11202] dev=pipefs ino=11202 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { read } for  
> pid=3342 comm="ifconfig" name=[11202] dev=pipefs ino=11202 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11201] dev=pipefs ino=11201 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { read } for  
> pid=3342 comm="ifconfig" name=[11201] dev=pipefs ino=11201 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11687] dev=pipefs ino=11687 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371250.432:658540): avc:  denied  { write } 
> for  pid=3342 comm="ifconfig" name=[11687] dev=pipefs ino=11687 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=PATH msg=audit(1120371251.502:661490): item=1 inode=2127845 
> dev=08:05 mode=0100755 ouid=0 ogid=0 rdev=00:00
> type=PATH msg=audit(1120371251.502:661490): item=0 
> name="/sbin/ifconfig" inode=9297060 dev=08:05 mode=0100755 ouid=0 
> ogid=0 rdev=00:00
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11687]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11687]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11201]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11201]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11202]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11202]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11203]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11203]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11205]"
> type=AVC_PATH msg=audit(1120371251.502:661490):  path="pipe:[11205]"
> type=SYSCALL msg=audit(1120371251.502:661490): arch=c000003e 
> syscall=59 success=yes exit=0 a0=627990 a1=627cb0 a2=608440 
> a3=2aaaaaac5000 items=2 pid=3370 auid=4294967295 uid=0 gid=0 euid=0 
> suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 comm="ifconfig" exe="/sbin/ifconfig"
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11205] dev=pipefs ino=11205 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { read } for  
> pid=3370 comm="ifconfig" name=[11205] dev=pipefs ino=11205 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11203] dev=pipefs ino=11203 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { read } for  
> pid=3370 comm="ifconfig" name=[11203] dev=pipefs ino=11203 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11202] dev=pipefs ino=11202 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { read } for  
> pid=3370 comm="ifconfig" name=[11202] dev=pipefs ino=11202 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11201] dev=pipefs ino=11201 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { read } for  
> pid=3370 comm="ifconfig" name=[11201] dev=pipefs ino=11201 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11687] dev=pipefs ino=11687 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=AVC msg=audit(1120371251.502:661490): avc:  denied  { write } 
> for  pid=3370 comm="ifconfig" name=[11687] dev=pipefs ino=11687 
> scontext=root:system_r:ifconfig_t tcontext=root:system_r:unconfined_t 
> tclass=fifo_file
> type=PATH msg=audit(1120371251.510:662032): item=1 inode=2127845 
> dev=08:05 mode=0100755 ouid=0 ogid=0 rdev=00:00
> type=PATH msg=audit(1120371251.510:662032): item=0 name="/sbin/ip" 
> inode=9297052 dev=08:05 mode=0100755 ouid=0 ogid=0 rdev=00:00

I did fixfiles relabel but it have'nt fixed them.
Whats the problem?
bug in the policy? (using fc4 and selinux-policy-targeted-1.25.3-12)




More information about the fedora-selinux-list mailing list