SELinux preventing the creation of a rawip_socket
Alexander Ploumistos <[email protected]> Wed, 21 Dec 2016 17:23:25 +0100
| Newsgroups | gmane.comp.mozilla.security |
|---|---|
| Message-ID | <CAM86y2t9AGAR+BEBW4Fo-WFgQzeCn18yFb6-efApLMZv9iz4_Q@mail.gmail.com> |
Hello all, A few days ago I filed a bug on BMO with a question https://bugzilla.mozilla.org/show_bug.cgi?id=1322872 and I was advised to take it to this list. You can get more details from the bug report and the links to the Red Hat Bugzilla - here's the gist: A short while after enabling e10s, I started seeing SELinux alerts, saying that it had prevented 57656220436F6E74656E74 from creating rawip_sockets. It took me a little while to figure out that 57656220436F6E74656E74 was actually firefox and a little while longer to notice that this always happened with specific ads served on a number of sites, with www.merriam-webster.com being the most consistent one. In Fedora, this was addressed in selinux-policy by disabling the relevant checks. However, given the nature of recent attacks worldwide, I was wondering if this might be a sign of something nefarious going on and not the expected behavior. I was told to get in touch with mozilla, hence this message. Best regards Alex