Re: SELinux preventing the creation of a rawip_socket

Alex,

Looking at the bug report, it looks like it's plugin container complaining
which makes me think this is a Flash file trying to make raw sockets using
the standard flash API for this.  That said, I know you mentioned that you
don't have any plugins enabled but I wonder if Flash is whitelisted in some
place somewhere

Cheers
Dev



On Dec 21, 2016 8:24 AM, "Alexander Ploumistos" <[email protected]>
wrote:

Hello all,

A few days ago I filed a bug on BMO with a question
https://bugzilla.mozilla.org/show_bug.cgi?id=1322872
and I was advised to take it to this list. You can get more details
from the bug report and the links to the Red Hat Bugzilla - here's the
gist:

A short while after enabling e10s, I started seeing SELinux alerts,
saying that it had prevented 57656220436F6E74656E74 from creating
rawip_sockets. It took me a little while to figure out that
57656220436F6E74656E74 was actually firefox and a little while longer
to notice that this always happened with specific ads served on a
number of sites, with www.merriam-webster.com being the most
consistent one. In Fedora, this was addressed in selinux-policy by
disabling the relevant checks. However, given the nature of recent
attacks worldwide, I was wondering if this might be a sign of
something nefarious going on and not the expected behavior. I was told
to get in touch with mozilla, hence this message.

Best regards
Alex
_______________________________________________
dev-security mailing list
[email protected]
https://lists.mozilla.org/listinfo/dev-security