https://bugzilla.redhat.com/show_bug.cgi?id=2154741
Bug ID: 2154741
Summary: Asterisk SELinux preventing
/proc/sys/net/ipv4/ip_local_port_range access
Product: Fedora
Version: 37
Hardware: x86_64
OS: Linux
Status: NEW
Component: asterisk
Severity: high
Assignee: jsmith.fedora(a)gmail.com
Reporter: arcadiy(a)ivanov.biz
QA Contact: extras-qa(a)fedoraproject.org
CC: bennie.joubert(a)jsdaav.com,
epel-packagers-sig(a)lists.fedoraproject.org,
jsmith.fedora(a)gmail.com, rbryant(a)redhat.com
Target Milestone: ---
Classification: Fedora
Description of problem:
Dec 18 22:47:16 hostname audit[3224]: AVC avc: denied { search } for
pid=3224 comm="asterisk" name="net" dev="proc" ino=174
scontext=system_u:system_r:asterisk_t:s0
tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0
Dec 18 22:47:16 hostname asterisk[3224]: [1671421636] libunbound[3224:0] error:
failed to read from file: /proc/sys/net/ipv4/ip_local_port_range (Permission
denied)
Version-Release number of selected component (if applicable):
18.12.1-1.fc37.1
How reproducible:
Always
Steps to Reproduce:
1. Install
2. Start with SELinux policy active
3. Observe error
--
You are receiving this mail because:
You are on the CC list for the bug.
https://bugzilla.redhat.com/show_bug.cgi?id=2154741