a few more problem with the latest policy

[Daniel J Walsh]

Farkas Levente wrote:

> hi,
> a few problem with the latest policy file.
> ------------------------------------------
> # audit2allow -i /var/log/messages -l
> allow apmd_t proc_t:file ioctl;

Added,

> allow dhcpc_t etc_t:file { unlink write };

restorecon /etc/resolv.conf*

> allow ifconfig_t initrc_t:udp_socket { read write };

No idea what is causing this.

>
> ------------------------------------------
> and here is the relevant part of the log file
> ------------------------------------------
> audit(1121423510.841:2): avc:  denied  { read write } for  pid=2215 
> comm="ip" name="[6542]" dev=sockfs ino=6542 
> scontext=system_u:system_r:ifconfig_t 
> tcontext=system_u:system_r:initrc_t tclass=udp_socket
> audit(1121423510.846:3): avc:  denied  { read write } for  pid=2218 
> comm="ip" name="[6542]" dev=sockfs ino=6542 
> scontext=system_u:system_r:ifconfig_t 
> tcontext=system_u:system_r:initrc_t tclass=udp_socket
> audit(1121423655.473:4): avc:  denied  { write } for  pid=2888 
> comm="cp" name="resolv.conf.predhclient" dev=hda2 ino=3997781 
> scontext=root:system_r:dhcpc_t tcontext=root:object_r:etc_t tclass=file
> audit(1121423655.473:5): avc:  denied  { unlink } for  pid=2888 
> comm="cp" name="resolv.conf.predhclient" dev=hda2 ino=3997781 
> scontext=root:system_r:dhcpc_t tcontext=root:object_r:etc_t tclass=file
> audit(1121423736.907:6): avc:  denied  { ioctl } for  pid=2982 
> comm="awk" name="state" dev=proc ino=-268434831 
> scontext=system_u:system_r:apmd_t tcontext=system_u:object_r:proc_t 
> tclass=file
> ------------------------------------------
> yours.
>


--