selinux denying ifconfig, Fedora 11

Dominick Grift domg472 at gmail.com
Sat Jul 11 19:22:21 UTC 2009


On Sat, 2009-07-11 at 12:14 -0700, Antonio Olivares wrote:
> [olivares at ET1161-05 ~]$ dmesg | grep 'avc'
> type=1400 audit(1247281500.625:4): avc:  denied  { read } for  pid=871 comm="ifconfig" name="mls" dev=selinuxfs ino=12 scontext=system_u:system_r:ifconfig_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file
> [olivares at ET1161-05 ~]$
> [olivares at ET1161-05 ~]$ cat /etc/fedora-release
> Fedora release 11 (Leonidas)
> [olivares at ET1161-05 ~]$ uname -r
> 2.6.30.1
> 
> smoltProfile here after install if it is useful?
> 
> http://www.smolts.org/client/show/pub_bf6b4475-b2d9-4796-8965-112b094912de
> 
> I only called command to check that I was connected while using dialup
> # ifconfig -a
> That was it, I saw setroubleshoot pop up but my fonts are very small, and I used above command to give me back avc.  
> 
> Regards,
> 
> Antonio 
> 

This issue should be resolved in latest policy:
 
rpm -Uvh
http://kojipkgs.fedoraproject.org/packages/selinux-policy/3.6.12/65.fc11/noarch/selinux-policy-3.6.12-65.fc11.noarch.rpm  http://kojipkgs.fedoraproject.org/packages/selinux-policy/3.6.12/65.fc11/noarch/selinux-policy-targeted-3.6.12-65.fc11.noarch.rpm

> 
>       
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20090711/030d8d36/attachment.sig>


More information about the fedora-selinux-list mailing list