ping problems.

[Kurt Roeckx <Q@ping.be>]

ping6 doesn't seem to work to work when pinging localhost (::1).
It does work in case I ping a remote host however.

I get this error:
avc:  denied  { recvfrom } for  pid=1631 exe=/bin/ping6 netif=lo
scontext=kurt:sysadm_r:ping_t tcontext=system_u:system_r:kernel_t
tclass=rawip_socket

I think the tclass should be icmp_socket_t instead, for which is
has permission to use recvfrom.

Then there is a problem for both ping and ping6 if you try to use
the -I parameter.  You get:

avc:  denied  { ioctl } for  pid=1641 exe=/bin/ping6
path=socket:[8429] dev=00:00 ino=8429
scontext=kurt:sysadm_r:ping_t tcontext=kurt:sysadm_r:ping_t
tclass=rawip_socket

avc:  denied  { ioctl } for  pid=1647 exe=/bin/ping
path=socket:[8439] dev=00:00 ino=8439
scontext=kurt:sysadm_r:ping_t tcontext=kurt:sysadm_r:ping_t
tclass=rawip_socket


Kurt


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.