-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Tom London wrote:
> Running rawhide: avahi-0.6.22-7.fc9.i386, selinux-policy-3.3.0-1.fc9.noarch
>
> Appears avahi needs getcap:
>
>
> type=AVC msg=audit(1203904427.662:13): avc: denied { getcap } for
> pid=2255 comm="avahi-daemon" scontext=system_u:system_r:avahi_t:s0
> tcontext=system_u:system_r:avahi_t:s0 tclass=process
> type=SYSCALL msg=audit(1203904427.662:13): arch=40000003 syscall=184
> success=no exit=-13 a0=8a1a78c a1=0 a2=4cb0f0 a3=8a1a788 items=0
> ppid=1 pid=2255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0
> egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="avahi-daemon"
> exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0
> key=(null)
> type=AVC msg=audit(1203904427.665:14): avc: denied { getcap } for
> pid=2255 comm="avahi-daemon" scontext=system_u:system_r:avahi_t:s0
> tcontext=system_u:system_r:avahi_t:s0 tclass=process
> type=SYSCALL msg=audit(1203904427.665:14): arch=40000003 syscall=184
> success=no exit=-13 a0=8a1b454 a1=0 a2=4cb0f0 a3=8a1b450 items=0
> ppid=1 pid=2255 auid=4294967295 uid=70 gid=70 euid=70 suid=70 fsuid=70
> egid=70 sgid=70 fsgid=70 tty=(none) ses=4294967295 comm="avahi-daemon"
> exe="/usr/sbin/avahi-daemon" subj=system_u:system_r:avahi_t:s0
> key=(null)
>
>
I am just going to give everydomain that has setcap, getcap. Since
these are suddenly popping up all over. I figure if you can setcap, you
probably should be allowed to get it as well.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkfCzz8ACgkQrlYvE4MpobP/CwCfUB/Vy5MdDBGHlfR+k5QfmmEK
fjkAnAygZPAuaiUiXmSmcr68vxX9wNKe
=wC5i
-----END PGP SIGNATURE-----
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
