dbusd and netlink_selinux_socket ?

[Tom London]

Running targeted/enforcing, latest rawhide.

dbusd on my system seems to be having problems starting:

Oct 24 06:48:20 localhost dbus-daemon: Can't send to audit system:
USER_AVC pid=2390 uid=0 loginuid=-1 message=avc:  can't open netlink
socket: 13 (Permission denied)

and in audit.log:

type=AVC msg=audit(1130161700.864:93): avc:  denied  { create } for 
pid=2390 comm="dbus-daemon"
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:system_r:system_dbusd_t:s0
tclass=netlink_selinux_socket
type=SYSCALL msg=audit(1130161700.864:93): arch=40000003 syscall=102
success=no exit=-13 a0=1 a1=bfbaa750 a2=2c2248 a3=19a items=0 pid=2390
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 comm="dbus-daemon" exe="/usr/bin/dbus-daemon"
type=SOCKETCALL msg=audit(1130161700.864:93): nargs=3 a0=10 a1=3 a2=7

dbusd.te seems to want create_socket_perms (or
create_netlink_socket_perms) for self:netlink_selinux_socket

That right?  Something else?

tom
--
Tom London

[Daniel J Walsh]

Tom London wrote:
> Running targeted/enforcing, latest rawhide.
>
> dbusd on my system seems to be having problems starting:
>
> Oct 24 06:48:20 localhost dbus-daemon: Can't send to audit system:
> USER_AVC pid=2390 uid=0 loginuid=-1 message=avc:  can't open netlink
> socket: 13 (Permission denied)
>
> and in audit.log:
>
> type=AVC msg=audit(1130161700.864:93): avc:  denied  { create } for 
> pid=2390 comm="dbus-daemon"
> scontext=system_u:system_r:system_dbusd_t:s0
> tcontext=system_u:system_r:system_dbusd_t:s0
> tclass=netlink_selinux_socket
> type=SYSCALL msg=audit(1130161700.864:93): arch=40000003 syscall=102
> success=no exit=-13 a0=1 a1=bfbaa750 a2=2c2248 a3=19a items=0 pid=2390
> auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
> fsgid=0 comm="dbus-daemon" exe="/usr/bin/dbus-daemon"
> type=SOCKETCALL msg=audit(1130161700.864:93): nargs=3 a0=10 a1=3 a2=7
>
> dbusd.te seems to want create_socket_perms (or
> create_netlink_socket_perms) for self:netlink_selinux_socket
>
> That right?  Something else?
> tom
>
> Tom London
>
> --
> fedora-selinux-list mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Try latest policy on 
ftp://people.redhat.com/dwalsh/SELinux/Fedora/selinux-policy*