netif and node check in RHEL5

["Takesi satoh" <t_mail@mail2Airport.com>]

[-- Attachment #1: Type: text/plain, Size: 1787 bytes --]

Hello,

I wonder that whether node and netif are checked in RHEL5 or not.
I tried to add some auditallow sentences in RHEL4 at first.

> auditallow unconfined_t node_type: node *;
> auditallow unconfined_t netif_type:netif *;

and executeed some commands such as,
> nc -p -l 8888
> echo "testtest" | nc 127.0.0.1 8888

Then, SELinux generated granted logs such as,
> localhost kernel: audit(1190468263.024:250): avc: granted { tcp_send }
for pid=6057 comm="nc" name="bash" dev=dm-0 ino=686823
scontext=root:system_r:unconfind_t tcontext=root:system_r:node_t
tclass=node

I tried same thing in RHEL5. but no granted logs are found in
/var/log/audit/audit.log.
I created module like below, and after compiling the module, tried
"semodule -i test.pp".
> policy_module(test, 1.0.0)
> gen_require {
> attribute node_type;
> attribute netif_type;
> type unconfined_t;
> }
> auditallow unconfined_t node_type:node *;
> auditallow unconfined_t netif_type:netif *;
>
> ( fc and if file are empty.)

I thought subject domain was not unconfined_t, so I confirmed what user
security context was.
But I logined root( unconfined_t )

Anyway, Does SELinux in RHEL5 checks node and netif ? or just my
mistake?

Regards,
K



Take a perfect family vacation to Orlando. Click Here.
<http://tagline.bidsystem.com/fc/Ioyw36XIxjaEAYbNOPV0Zq9V2bkt0YOrGFBXvN6
j0K6aTh5Me2S2sL/> 



<span id=m2wTl><p><font face="Arial, Helvetica, sans-serif" size="2" style="font-size:13.5px">_______________________________________________________________<BR>Get the FREE email that has everyone talking at <a href=http://www.mail2world.com target=new>http://www.mail2world.com</a><br>  <font color=#999999>Unlimited Email Storage &#150; POP3 &#150; Calendar &#150; SMS &#150; Translator &#150; Much More!</font></font></span>

[-- Attachment #2: Type: text/html, Size: 2273 bytes --]