SELinux preventing the creation of a rawip_socket

Alexander Ploumistos <[email protected]> Wed, 21 Dec 2016 17:23:25 +0100
Newsgroups gmane.comp.mozilla.security
Message-ID <CAM86y2t9AGAR+BEBW4Fo-WFgQzeCn18yFb6-efApLMZv9iz4_Q@mail.gmail.com>
Hello all,

A few days ago I filed a bug on BMO with a question
https://bugzilla.mozilla.org/show_bug.cgi?id=1322872
and I was advised to take it to this list. You can get more details
from the bug report and the links to the Red Hat Bugzilla - here's the
gist:

A short while after enabling e10s, I started seeing SELinux alerts,
saying that it had prevented 57656220436F6E74656E74 from creating
rawip_sockets. It took me a little while to figure out that
57656220436F6E74656E74 was actually firefox and a little while longer
to notice that this always happened with specific ads served on a
number of sites, with www.merriam-webster.com being the most
consistent one. In Fedora, this was addressed in selinux-policy by
disabling the relevant checks. However, given the nature of recent
attacks worldwide, I was wondering if this might be a sign of
something nefarious going on and not the expected behavior. I was told
to get in touch with mozilla, hence this message.

Best regards
Alex