Package: selinux-policy-default
Version: 2:2.20110726-12
Severity: normal
Dear Maintainer,
Using selinux with the default policy on debian 7 makes it impossible to
connect to wifi networks using NetworkManager.
NetworkManager will report a similar error in dmesg:
[ 56.858552] wlan0: authenticate with 74:ea:3a:e9:46:2c (try 1)
[ 56.861540] wlan0: authenticated
[ 56.861883] wlan0: failed to insert Dummy STA entry for the AP (error -17)
[ 57.531657] wlan0: deauthenticating from 74:ea:3a:e9:46:2c by local choice
(reason=2)
It seems that it needs access to /run/network/ifstate
except from /var/log/audit/audit.log
type=AVC msg=audit(1370353842.447:245): avc: denied { open } for pid=590
comm="ifup" name="ifstate" dev=tmpfs ino=6897
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1370353842.447:246): avc: denied { lock } for pid=590
comm="ifup" path="/run/network/ifstate" dev=tmpfs ino=6897
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1370353842.447:247): avc: denied { getattr } for pid=590
comm="ifup" path="/run/network/ifstate" dev=tmpfs ino=6897
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1370353842.447:248): avc: denied { unlink } for pid=590
comm="ifup" name="ifstate" dev=tmpfs ino=6897
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1370353843.471:249): avc: denied { read } for pid=3352
comm="NetworkManager" name="ifstate" dev=tmpfs ino=14226
scontext=system_u:system_r:NetworkManager_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1370353843.471:249): avc: denied { open } for pid=3352
comm="NetworkManager" name="ifstate" dev=tmpfs ino=14226
scontext=system_u:system_r:NetworkManager_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=SYSCALL msg=audit(1370353843.471:249): arch=c000003e syscall=2 success=yes
exit=19 a0=4b49b0 a1=0 a2=1b6 a3=7fff664177b0 items=0 ppid=1 pid=3352
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm="NetworkManager" exe="/usr/sbin/NetworkManager"
subj=system_u:system_r:NetworkManager_t:s0 key=(null)
type=AVC msg=audit(1370353843.471:250): avc: denied { getattr } for pid=3352
comm="NetworkManager" path="/run/network/ifstate" dev=tmpfs ino=14226
scontext=system_u:system_r:NetworkManager_t:s0
tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=SYSCALL msg=audit(1370353843.471:250): arch=c000003e syscall=5 success=yes
exit=0 a0=13 a1=7fff66417760 a2=7fff66417760 a3=7fff664177b0 items=0 ppid=1
pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0
fsgid=0 tty=(none) ses=4294967295 comm="NetworkManager"
exe="/usr/sbin/NetworkManager" subj=system_u:system_r:NetworkManager_t:s0
key=(null)
-- System Information:
Debian Release: 7.0
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages selinux-policy-default depends on:
ii libpam-modules 1.1.3-7.1
ii libselinux1 2.1.9-5
ii libsepol1 2.1.4-3
ii policycoreutils 2.1.10-9
ii python 2.7.3-4
Versions of packages selinux-policy-default recommends:
ii checkpolicy 2.1.8-2
ii setools 3.3.7-3
Versions of packages selinux-policy-default suggests:
pn logcheck <none>
pn syslog-summary <none>
-- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local [Errno 13] Permesso
negato: u'/etc/selinux/default/modules/active/file_contexts.local'
-- no debconf information
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
