Tom London wrote:
Running strict/enforcing off of latest rawhide (selinux-policy-strict-1.18.2-2):
privoxy generates:
Nov 7 13:44:10 fedora kernel: audit(1099863850.432:0): avc: denied { connect } for pid=14703 exe=/usr/sbin/privoxy
scontext=system_u:system_r:privoxy_t
tcontext=system_u:system_r:privoxy_t tclass=udp_socket
Nov 7 13:44:10 fedora kernel: audit(1099863850.469:0): avc: denied { connect } for pid=14703 exe=/usr/sbin/privoxy
scontext=system_u:system_r:privoxy_t
tcontext=system_u:system_r:privoxy_t tclass=tcp_socket
This patch seems to fix it: --- SAVE/privoxy.te 2004-11-07 18:00:09.433732712 -0800 +++ ./privoxy.te 2004-11-07 18:00:40.419276794 -0800 @@ -18,6 +18,7 @@ # Use the network. can_network(privoxy_t) allow privoxy_t port_t:{ tcp_socket udp_socket } name_bind; +allow privoxy_t self:{ tcp_socket udp_socket } connect; allow privoxy_t etc_t:file { getattr read }; allow privoxy_t self:capability { setgid setuid }; allow privoxy_t self:unix_stream_socket create_socket_perms ;
tom
Added thanks.
Dan
