[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Help: No internet connection



On Mon, Dec 14, 2009 at 12:07 AM,  <simon schneebeli okko org> wrote:
>
>>>>
>>>
>>> What's that magic trick? I get to
>>> http://fedoraproject.org/wiki/IndexAdmin
>>> and can surf around there without a problem. Magic?
>>>
>>
>> It's seams to be an DNS issue. FF fails to lookup the IP-number.
>> During the installation of Fedora, did you got any errors?
>>
>> //HW
>
> I'm not aware of any errors during the installation.
>
> However, in SELinux Troubleshooter, I have this error message that might be
> linked to this problem:
>
>
> Summary:
>
> SELinux is preventing /bin/find "getattr" access to
> /var/lib/misc/prelink.full.
>
> Detailed Description:
>
> [find has a permissive type (prelink_cron_system_t). This access was not
> denied.]
>
> SELinux denied access requested by find. /var/lib/misc/prelink.full may be a
> mislabeled. /var/lib/misc/prelink.full default SELinux type is
> prelink_var_lib_t,
> but its current type is cron_var_lib_t. Changing this file back to the
> default
> type, may fix your problem.
>
> File contexts can be assigned to a file in the following ways.
>
>  * Files created in a directory receive the file context of the parent
>    directory by default.
>  * The SELinux policy might override the default label inherited from the
>    parent directory by specifying a process running in context A which
> creates
>    a file in a directory labeled B will instead create the file with label
> C.
>    An example of this would be the dhcp client running with the dhclient_t
> type
>    and creating a file in the directory /etc. This file would normally
> receive
>    the etc_t type due to parental inheritance but instead the file is
> labeled
>    with the net_conf_t type because the SELinux policy specifies this.
>  * Users can change the file context on a file using tools such as chcon, or
>    restorecon.
>
> This file could have been mislabeled either by user error, or if an normally
> confined application was run under the wrong domain.
>
> However, this might also indicate a bug in SELinux because the file should
> not
> have been labeled with this type.
>
> If you believe this is a bug, please file a bug report against this package.
>
> Allowing Access:
>
> You can restore the default system context to this file by executing the
> restorecon command. restorecon '/var/lib/misc/prelink.full', if this file is
> a
> directory, you can recursively restore using restorecon -R
> '/var/lib/misc/prelink.full'.
>
> Fix Command:
>
> /sbin/restorecon '/var/lib/misc/prelink.full'
>
> Additional Information:
>
> Source Context
>  system_u:system_r:prelink_cron_system_t:s0-s0:c0.c
>                              1023
> Target Context                system_u:object_r:cron_var_lib_t:s0
> Target Objects                /var/lib/misc/prelink.full [ file ]
> Source                        find
> Source Path                   /bin/find
> Port                          <Unknown>
> Host                          sangam
> Source RPM Packages           findutils-4.4.2-4.fc12
> Target RPM Packages           prelink-0.4.2-4.fc12
> Policy RPM                    selinux-policy-3.6.32-55.fc12
> Selinux Enabled               True
> Policy Type                   targeted
> Enforcing Mode                Enforcing
> Plugin Name                   restorecon
> Host Name                     sangam
> Platform                      Linux sangam 2.6.31.6-166.fc12.i686.PAE #1 SMP
> Wed
>                              Dec 9 11:00:30 EST 2009 i686 i686
> Alert Count                   1
> First Seen                    Sun 13 Dec 2009 01:25:21 PM CET
> Last Seen                     Sun 13 Dec 2009 01:25:21 PM CET
> Local ID                      3eb8c967-bfe5-483b-89c7-9773eacbb4cf
> Line Numbers
>
> Raw Audit Messages
>
> node=sangam type=AVC msg=audit(1260707121.819:25385): avc:  denied  {
> getattr } for  pid=11599 comm="find" path="/var/lib/misc/prelink.full"
> dev=dm-0 ino=2097510
> scontext=system_u:system_r:prelink_cron_system_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:cron_var_lib_t:s0 tclass=file
>
> node=sangam type=SYSCALL msg=audit(1260707121.819:25385): arch=40000003
> syscall=300 success=yes exit=0 a0=ffffff9c a1=96c3704 a2=96c36a4 a3=100
> items=0 ppid=11598 pid=11599 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
> sgid=0 fsgid=0 tty=(none) ses=4 comm="find" exe="/bin/find"
> subj=system_u:system_r:prelink_cron_system_t:s0-s0:c0.c1023 key=(null)
>
>
>
>
>
No, I don't think this is relevant...


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]