-
Bug
-
Resolution: Unresolved
-
Minor
-
rhel-9.4
-
None
-
No
-
None
-
rhel-sst-security-selinux
-
ssg_security
-
1
-
False
-
-
None
-
Red Hat Enterprise Linux
-
None
-
None
-
None
-
x86_64
-
None
What were you trying to do that didn't work?
Run SELinux enforcing with dnsmasq allowed create access on socket labeled dnsmasq_t by default
What is the impact of this issue to you?
Unclear, but may be connected to bug RHEL-59988
Please provide the package NVR for which the bug is seen:
selinux-policy-38.1.35-2.el9_4.2.noarch
dnsmasq-2.85-16.el9_4.x86_64
How reproducible is this bug?:
Always, until:
# ausearch -c 'dnsmasq' --raw | audit2allow -M my-dnsmasq # semodule -X 300 -i my-dnsmasq.pp
Steps to reproduce
- Unclear, but set up dnsmasq as per this fedora discussion
Expected results
No SELinux denials on dnsmasq sockets
Actual results
SELinux denials on dnsmasq sockets
- impacts account
-
RHEL-59988 dnsmasq times out waiting for return of escaping local queries
- New