pcp
[Top] [All Lists]

[Bug 1332014] SELinux is preventing pmdalinux from using the 'net_admin'

To: pcp@xxxxxxxxxxx
Subject: [Bug 1332014] SELinux is preventing pmdalinux from using the 'net_admin' capabilities.
From: bugzilla@xxxxxxxxxx
Date: Wed, 04 May 2016 08:55:55 +0000
Auto-submitted: auto-generated
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <bug-1332014-355098@xxxxxxxxxxxxxxxxxxx>
References: <bug-1332014-355098@xxxxxxxxxxxxxxxxxxx>
https://bugzilla.redhat.com/show_bug.cgi?id=1332014

Lukas Vrabec <lvrabec@xxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |brolley@xxxxxxxxxx,
                   |                            |fche@xxxxxxxxxx,
                   |                            |lberk@xxxxxxxxxx,
                   |                            |mgoodwin@xxxxxxxxxx,
                   |                            |nathans@xxxxxxxxxx,
                   |                            |pcp@xxxxxxxxxxx,
                   |                            |scox@xxxxxxxxxx
          Component|selinux-policy              |pcp
           Assignee|mgrepl@xxxxxxxxxx           |nathans@xxxxxxxxxx



--- Comment #1 from Lukas Vrabec <lvrabec@xxxxxxxxxx> ---
Do 'pmdalinux' any of these operations?

CAP_NET_ADMIN
              Perform various network-related operations:
              * interface configuration;
              * administration of IP firewall, masquerading,  and  accountâ
                ing;
              * modify routing tables;
              * bind to any address for transparent proxying;
              * set type-of-service (TOS)
              * clear driver statistics;
              * set promiscuous mode;
              * enabling multicasting;
              * use  setsockopt(2)  to  set  the  following socket options:
                SO_DEBUG, SO_MARK, SO_PRIORITY (for a priority outside  the
                range 0 to 6), SO_RCVBUFFORCE, and SO_SNDBUFFORCE.

Thank you.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug 
https://bugzilla.redhat.com/token.cgi?t=e8SQUtFMDN&a=cc_unsubscribe
<Prev in Thread] Current Thread [Next in Thread>