Tom London wrote:
On 6/2/07, Tom London <selinux(a)gmail.com> wrote:
> Seeing this for the last few days on Rawhide:
>
> Jun 2 12:24:36 localhost kernel: e1000: eth0: e1000_watchdog: NIC
> Link is Up 100 Mbps Full Duplex, Flow Control: RX/TX
> Jun 2 12:24:36 localhost kernel: e1000: eth0: e1000_watchdog: 10/100
> speed: disabling TSO
> Jun 2 12:24:36 localhost kernel: audit(1180812265.018:8): avc:
> denied { getattr } for pid=2101 comm="dhclient-script"
> name="setfiles" dev=dm-0 ino=11337869
> scontext=system_u:system_r:dhcpc_t:s0
> tcontext=system_u:object_r:setfiles_exec_t:s0 tclass=file
>
> Not sure where this comes from.
>
> There is a call to 'cp -fp', could that be it?
>
BZ'd here:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=242259
setfiles/restorecon now share the same context setfiles_exec_t. dhcpc
is executing restorecon in some of its scripts, I would guess.
There is a major policy update for Rawhide, that I have been working on
that should fix these problems. (Merging Strict/Targeted policy). But
it might break other stuff so I am trying to work out the major bugs.