Re: [FC5] Wrong default context for hping2
On Friday 07 April 2006 02:09, Charles-Edouard Ruault <ce(a)ruault.com> wrote:
But the ping_exec_t domain does not allow the creation of packet
socket.
Here's the audit log :
type=AVC msg=audit(1144338231.596:1933): avc: denied { create } for
pid=17334 comm="hping2" scontext=user_u:system_r:ping_t:s0-s0:c0.c255
tcontext=user_u:system_r:ping_t:s0-s0:c0.c255 tclass=packet_socket
Allowing the packet_socket access seems appropriate as it's just different
ways of doing the same thing.
In my next update to the rawhide policy I'll include this. Not sure if it's
worth doing for FC5 as hping isn't in Core.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page