LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking > Linux - Wireless Networking
User Name
Password
Linux - Wireless Networking This forum is for the discussion of wireless networking in Linux.

Notices



Reply
 
Search this Thread
Old 10-14-2008, 05:51 PM   #1
Hairyloon
LQ Newbie
 
Registered: Mar 2008
Posts: 28

Rep: Reputation: 15
gsm connection keeps hanging: blocked by SELinux?


I've recently installed Fedora (v9 I think).
I'm using a Huawei E220 USB modem. It has been working fine for most of the time, but periodically the connection hangs and the troubleshooter flags up a message.
Recently, it has got significantly worse, to the extent that it will probably take me three goes at connecting to post this query (so apologies in advance if I do it twice).

Error messages (in order of frequency):
SELinux is preventing NetworkManager (NetworkManager_t) "sigkill" to <Unknown> (pppd_t).
SELinux is preventing gdb (NetworkManager_t) "write" to ./rpm (rpm_var_lib_t).
SELinux is preventing gdb (NetworkManager_t) "search" to ./rpm (rpm_var_lib_t).
SELinux is preventing gdb (NetworkManager_t) "getattr" to /var/lib/rpm (rpm_var_lib_t).

They all have much the same "detailed description":
"SELinux denied access requested by gdb. It is not expected that this access is required by gdb and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access."

And now, it keeps giving me kernel failures. I've had to resort to Windows to get back online.
That does show it isn't the hardware gone wrong.

So how do I fix it, and (pardon me being stupid) how do I file a bug report?
 
Old 10-15-2008, 01:55 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,744
Blog Entries: 54

Rep: Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973Reputation: 2973
The first rule looks OK, the second one makes me wonder why NetworkManager is using 'gdb' in the first place and secondly why it *should* write to "./rpm" (RPM configuration stuff, referred to as being part of the rpm_var_lib "domain"). A workaround could be to make a local SE Linux policy:
Code:
( cat /var/log/audit/audit.log; cat /var/log/messages ) | audit2allow -M localpolicy
checkmodule -M -m -o localpolicy.mod localpolicy.te
semodule_package -o localpolicy.pp -m localpolicy.mod
semodule -i modules/localpolicy.pp
but you might want to first check the Fedora site for SE Linux differences between this approach and how it should be done with F9. The same site should show a link to the Fedora bug tracker (bugzilla.redhat.com?)
 
  


Reply

Tags
broadband, mobile


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Gaim Won't Connect Saying Connection Would Have Blocked! ejan Linux - Software 7 05-06-2007 09:56 AM
fetchmail is blocked by SELinux marozsas Fedora 4 05-16-2006 05:07 AM
LXer: Telsasoft, a Telecommunications Service Assurance Software Company Based in Minneapolis, Minnesota Received Order for a Set of GSM CDR (Call Detail Record) Reports from a Regional GSM Network Service LXer Syndicated Linux News 0 01-03-2006 10:46 PM
Hanging Connection. rvoigt Linux - Newbie 1 09-13-2004 10:28 AM
Internet connection automatically hanging up in suse. Why? bootsy Linux - Newbie 5 04-04-2004 06:14 PM


All times are GMT -5. The time now is 11:34 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration