allow NetworkManager_t initrc_t:process sigkill ??

[Shintaro Fujiwara]

Hi, this morning I started up my Fedora and got this.

type=AVC msg=audit(1390251172.954:357): avc:  denied  { sigkill } for
pid=1022 comm="nm-dispatcher.a"
scontext=system_u:system_r:NetworkManager_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=process

"report a bug" says SETroubleShoot, so I reported on this list.

Thanks.

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/21/2014 01:55 PM, Shintaro Fujiwara wrote:
>  Hi, this morning I started up my Fedora and got this.
>  
>  type=AVC msg=audit(1390251172.954:357): avc:  denied  { sigkill } for
>  pid=1022 comm="nm-dispatcher.a"
>  scontext=system_u:system_r:NetworkManager_t:s0 
>  tcontext=system_u:system_r:initrc_t:s0 tclass=process
>  
>  "report a bug" says SETroubleShoot, so I reported on this list.
>  
>  Thanks.
>  
>  
>  
>  -- selinux mailing list selinux(a)lists.fedoraproject.org 
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>   
Report it as a bug.  I believe we already have fixes for this in Rawhide.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>
> iEYEARECAAYFAlLe4pMACgkQrlYvE4MpobMFDgCgxifhhQ3k57Z+iqWlKA/5veKM
> CeIAn20mBPCOOsNjcgRh2xJlYczeyMQN
> =dOLQ
> -----END PGP SIGNATURE-----

[Shintaro Fujiwara]

Yep, as soon as I get back from work.


2014/1/22 Daniel J Walsh <dwalsh(a)redhat.com&gt;

>  -----BEGIN PGP SIGNED MESSAGE-----
>  Hash: SHA1
>
>  On 01/21/2014 01:55 PM, Shintaro Fujiwara wrote:
>  > Hi, this morning I started up my Fedora and got this.
>  >
>  > type=AVC msg=audit(1390251172.954:357): avc:  denied  { sigkill } for
>  > pid=1022 comm="nm-dispatcher.a"
>  > scontext=system_u:system_r:NetworkManager_t:s0
>  > tcontext=system_u:system_r:initrc_t:s0 tclass=process
>  >
>  > "report a bug" says SETroubleShoot, so I reported on this list.
>  >
>  > Thanks.
>  >
>  >
>  >
>  > -- selinux mailing list selinux(a)lists.fedoraproject.org
>  > https://admin.fedoraproject.org/mailman/listinfo/selinux
>  >
>  Report it as a bug.  I believe we already have fixes for this in Rawhide.
> >  -----BEGIN PGP SIGNATURE-----
> >  Version: GnuPG v1
> >  Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >
> >  iEYEARECAAYFAlLe4pMACgkQrlYvE4MpobMFDgCgxifhhQ3k57Z+iqWlKA/5veKM
> >  CeIAn20mBPCOOsNjcgRh2xJlYczeyMQN
> >  =dOLQ
> >  -----END PGP SIGNATURE----- 
>  


-- 
http://intrajp.no-ip.com/ Home Page

[Miroslav Grepl]

On 01/21/2014 10:23 PM, Shintaro Fujiwara wrote:
>  Yep, as soon as I get back from work.
>
>
>  2014/1/22 Daniel J Walsh <dwalsh(a)redhat.com <mailto:[e-mail]>>
>
>      -----BEGIN PGP SIGNED MESSAGE-----
>      Hash: SHA1
>
>      On 01/21/2014 01:55 PM, Shintaro Fujiwara wrote:
>      > Hi, this morning I started up my Fedora and got this.
>      >
>      > type=AVC msg=audit(1390251172.954:357): avc:  denied  { sigkill
>      } for
>      > pid=1022 comm="nm-dispatcher.a"
>      > scontext=system_u:system_r:NetworkManager_t:s0
>      > tcontext=system_u:system_r:initrc_t:s0 tclass=process
>      >
>      > "report a bug" says SETroubleShoot, so I reported on this list.
>      >
>      > Thanks.
>      >
>      >
>      >
>      > -- selinux mailing list selinux(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      > https://admin.fedoraproject.org/mailman/listinfo/selinux
>      >
>      Report it as a bug.  I believe we already have fixes for this in
>      Rawhide.
> >      -----BEGIN PGP SIGNATURE-----
> >      Version: GnuPG v1
> >      Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
> >
> >      iEYEARECAAYFAlLe4pMACgkQrlYvE4MpobMFDgCgxifhhQ3k57Z+iqWlKA/5veKM
> >      CeIAn20mBPCOOsNjcgRh2xJlYczeyMQN
> >      =dOLQ
> >      -----END PGP SIGNATURE----- 
>
>
>
>  -- 
>  http://intrajp.no-ip.com/ Home Page
>
>
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux 
We have fixes also in
F20.