SELinux Blocking nmap Access on UDP Port 68 - Fedora System Log Analysis
This log entry details a series of system events on a Fedora system, starting with the initiation of a session for the 'root' user at 04:20:01 on Sep 22. Subsequently, the 'org.fedoraproject.Setroubleshootd' service is activated using the D-Bus (Desktop Bus) messaging system. The service is successfully activated at 04:20:34.
The core issue arises with a SELinux (Security-Enhanced Linux) block preventing the program 'nmap' from accessing the UDP socket port 68 using the 'name_bind' permission. The log recommends running the command 'sealert -l e65d845d-9a85-4a6d-8e94-4987cef0874b' to retrieve complete SELinux messages related to this event.
If 'nmap' should have default access to 'name_bind' on port 68, the log suggests reporting this as a bug. Alternatively, the following commands can be used to generate a local policy module, granting temporary access:
'ausearch -c 'nmap' --raw | audit2allow -M my-nmap' 'semodule -i my-nmap.pp'
原文地址: https://www.cveoy.top/t/topic/b2KN 著作权归作者所有。请勿转载和采集!