Re: Selinux and kernel-2.6.12-1.1381 Fedora Core 3

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




--- Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote:

> Antonio Olivares wrote:
> > --- Rahul Sundaram <sundaram@xxxxxxxxxx> wrote:
> >
> >   
> >> Antonio Olivares wrote:
> >>
> >>     
> >>> Dear Kind Folks,
> >>>   I recently updated one of my machines at work
> >>>       
> >> which
> >>     
> >>> was running Fedora Core 3 to
> kernel-2.6.12-1.1381
> >>>       
> >> via
> >>     
> >>> yum.  When I rebooted and booted to the new
> kernel,
> >>>       
> >> I
> >>     
> >>> fired up firefox and could not load yahoo
> webpage. 
> >>>       
> >> I
> >>     
> >>> tried google, Fedorafaq, Distrowatch and
> nothing. 
> >>>       
> >> I
> >>     
> >>> suspected Selinux could be the culprit, so I
> did:
> >>> Hat -> System Settings -> Security Level and
> >>>       
> >> disabled
> >>     
> >>> selinux.  Rebooted with new settings and viola I
> >>>       
> >> could
> >>     
> >>> see yahoo, distrowatch, google, etc.  I went to
> >>> terminal fired up yum and yum update selinux and
> >>>       
> >> gave
> >>     
> >>> me error message.  I tried again this time with
> >>> selinux-targetpolicy? (not to sure) but it went
> >>> through.  I reenabled selinux, and rebooted and
> >>>       
> >> could
> >>     
> >>> not view any webpages again.  I will get back to
> >>>       
> >> the
> >>     
> >>> machine on Monday, and it makes me wonder about
> >>>       
> >> what
> >>     
> >>> do I need to do, which updates I need to run.  
> >>>
> >>> kernel installed ->
> [kernel-2.6.12-1.1381_FC3.i686]
> >>>
> >>> I read very carefully the FAQ for SELinux from 
> >>> http://www.nsa.gov/selinux/info/faq.cfm
> >>> but I am still clueless.  I would like to keep
> >>>       
> >> selinux
> >>     
> >>> enabled and still view webpages.  How can I
> still
> >>>       
> >> do
> >>     
> >>> that?  
> >>>  
> >>>
> >>>       
> >> post to the fedora-selinux list with the AVC
> denied
> >> messages in 
> >> /var/log/messages. Fedora SELinux FAQ is
> available
> >> from
> >>
> >> http://fedoraproject.org/wiki/Communicate
> >> http://fedora.redhat.com/docs/selinux-faq/
> >>
> >> regards
> >> Rahul
> >>
> >> -- 
> >> fedora-list mailing list
> >> fedora-list@xxxxxxxxxx
> >> To unsubscribe:
> >>
> https://www.redhat.com/mailman/listinfo/fedora-list
> >>
> >>     
> >
> > I'll do that come Monday, thanks for helping.  In
> any
> > case, at home same thing happened, here are some
> avc
> > messages
> >
> > audit(1131052412.181:2): avc:  denied  {
> name_connect
> > } for  pid=4314 comm="gkrellm" dest=7634
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:port_t
> tclass=tcp_socket
> > audit(1131052412.349:3): avc:  denied  {
> name_connect
> > } for  pid=4317 comm="eggcups" dest=631
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:reserved_port_t
> > tclass=tcp_socket
> > audit(1131052412.349:4): avc:  denied  {
> name_connect
> > } for  pid=4317 comm="eggcups" dest=631
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:reserved_port_t
> > tclass=tcp_socket
> > CSLIP: code copyright 1989 Regents of the
> University
> > of California
> > PPP generic driver version 2.4.2
> > PPP Deflate Compression module registered
> > audit(1131052690.058:5): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052692.227:6): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052699.727:7): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052702.155:8): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052713.032:9): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052718.472:10): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052726.685:11): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052730.917:12): avc:  denied  {
> name_connect
> > } for  pid=4602 comm="firefox-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052743.510:13): avc:  denied  {
> name_connect
> > } for  pid=4617 comm="mozilla-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052746.942:14): avc:  denied  {
> name_connect
> > } for  pid=4617 comm="mozilla-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052843.092:15): avc:  denied  {
> name_connect
> > } for  pid=4692 comm="mozilla-bin" dest=80
> > scontext=user_u:system_r:unconfined_t
> > tcontext=system_u:object_r:http_port_t
> > tclass=tcp_socket
> > audit(1131052848.928:16): avc:  denied  {
> name_connect
> > } for  pid=4692 comm="mozilla-bin" dest=443
> 
=== message truncated ===

[root@rio ~]# yum update
selinux-policy-targeted-1.17.30-3.19
Setting up Update Process
Setting up Repo:  livna-stable
repomd.xml                100%
|=========================|  951 B    00:00
Setting up Repo:  livna-unstable
repomd.xml                100%
|=========================|  951 B    00:00
Setting up Repo:  updates-released
repomd.xml                100%
|=========================|  951 B    00:00
Setting up Repo:  livna-testing
repomd.xml                100%
|=========================|  951 B    00:00
Setting up Repo:  base
repomd.xml                100%
|=========================| 1.1 kB    00:00
Setting up Repo:  extras
repomd.xml                100%
|=========================|  951 B    00:00
Reading repository metadata in from local files
livna-stab:
##################################################
547/547
livna-unst:
##################################################
151/151
primary.xml.gz            100%
|=========================| 369 kB    00:00
MD Read   :
##################################################
977/977
updates-re:
##################################################
977/977
base      :
##################################################
2622/2622
extras    :
##################################################
1705/1705
Could not find update match for
selinux-policy-targeted-1.17.30-3.19
No Packages marked for Update/Obsoletion

I also tried the direct link but I get the message
porkchop.devel.redhat cannot be found.  Please check
the name and try again.  

Sorry to bother,

Antonio


		
__________________________________ 
Yahoo! FareChase: Search multiple travel sites in one click.
http://farechase.yahoo.com


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux