Further on SElinux and kismet
Some days ago I was trying to run kismet on a system with F9 running
SElinux and kismet failed to start and complained about being unable
to write to the file ssid_map which was in the normal user main dir.
There was an AVC denial indicating that kismet was not permitted to access
that file.
It was suggested that I make kismet look at /var/lib/kismet instead.
Having tried again this evening and changed kismet.conf so that
%h/ was changed to /var/lib/kismet/ then kismet still fails to start and the
terminal window gives:
Will attempt to put networkmanager to sleep...
Allowing clients to fetch WEP keys.
WARNING: Disabling GPS logging.
SSID cloak file did not exist, it will be created.
FATAL: Could not open SSID track file '/var/lib/kismet/ssid_map' for writing:
Permission denied
Sending termination request to channel control child 3538...
Waiting for channel control child 3538 to exit...
WARNING: Sometimes cards don't always come out of monitor mode
cleanly. If your card is not fully working, you may need to
restart or reconfigure it for normal operation.
Trying to wake networkmanager back up...
WARNING: Failed to connect to DBUS system, will not be able to control
networkmanager: Failed to connect to socket /var/run/dbus/system_bus_socket:
Permission denied
WARNING: Failed to send 'wake' command to networkmanager via DBUS, NM may still
be inactive.Kismet exiting.
Done.
I checked the contexts:
[root@lapmike2 kismet]# ll -Zld /var/lib/kismet
drwxrwx--- 2 system_u:object_r:kismet_var_lib_t:s0 root kismet 4096 2008-11-18
20:59 /var/lib/kismet
[root@lapmike2 kismet]# ll -Z /var/lib/kismet
-rw-rw-rw- root root unconfined_u:object_r:kismet_var_lib_t:s0 ssid_map
Any ideas how to fix this - in the above there is no AVC denial but I am
guessing that SElinux may still be involved?