dbusd and netlink_selinux_socket ?

Tom London selinux at gmail.com
Mon Oct 24 15:27:48 UTC 2005


Running targeted/enforcing, latest rawhide.

dbusd on my system seems to be having problems starting:

Oct 24 06:48:20 localhost dbus-daemon: Can't send to audit system:
USER_AVC pid=2390 uid=0 loginuid=-1 message=avc:  can't open netlink
socket: 13 (Permission denied)

and in audit.log:

type=AVC msg=audit(1130161700.864:93): avc:  denied  { create } for 
pid=2390 comm="dbus-daemon"
scontext=system_u:system_r:system_dbusd_t:s0
tcontext=system_u:system_r:system_dbusd_t:s0
tclass=netlink_selinux_socket
type=SYSCALL msg=audit(1130161700.864:93): arch=40000003 syscall=102
success=no exit=-13 a0=1 a1=bfbaa750 a2=2c2248 a3=19a items=0 pid=2390
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 comm="dbus-daemon" exe="/usr/bin/dbus-daemon"
type=SOCKETCALL msg=audit(1130161700.864:93): nargs=3 a0=10 a1=3 a2=7

dbusd.te seems to want create_socket_perms (or
create_netlink_socket_perms) for self:netlink_selinux_socket

That right?  Something else?

tom
--
Tom London




More information about the selinux mailing list