-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Clarkson, Mike R (US SSA) wrote:
> Does the ping utility normally read/write to the /tmp directory?
>
> I've got a domain that uses ping in the ping_t domain, using the
> netutils_domtrans_ping interface, and I'm getting the following from
> audit2allow:
>
> allow ping_t tmp_t:file { read write getattr ioctl };
>
> Thanks
>
>
>
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
> the words "unsubscribe selinux" without quotes as the message.
These situations are almost always leaked file descriptor. The tool
that is domtrans to ping is leaking or one of it's parents.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iEYEARECAAYFAkh7swsACgkQrlYvE4MpobO0pACfSmDU4n1MlqbG28u/8J6Rj7v2
WWQAoM00W2onH9YGrd+8j3Rfw+IgcGzC
=QYQe
-----END PGP SIGNATURE-----
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
