ºìÁªLinuxÃÅ»§
Linux°ïÖú

[ÇóÖú]Fedora10Íø¿¨Ð޸IJÎÊýºóËÀ»ú¡­¡­

·¢²¼Ê±¼ä:2009-05-31 14:15:36À´Ô´:ºìÁª×÷Õß:icecox
[i=s] ±¾Ìû×îºóÓÉ icecox ÓÚ 2009-5-31 14:22 ±à¼­ [/i]

[font=·ÂËÎ_GB2312]¸÷λ¸ßÊÖ£¬ÇëÄãÃǰïæ¿´¿´Õâ¸öÎÊÌâÔõô´¦Àí¡£
×î½ü¼¸Ìì¡£ÔÚibm t42µÄ±¾×ÓÉÏÃæ°²×°ÁËlinux fedora 10 ϵͳ¡£
°²×°¹ý³ÌºÜ˳Àû£¬ÏµÍ³°²×°ÉÏÒÔºó¡£ËùÓеÄÉ豸¶¼Çý¶¯ÁË£¬Î¨¶ÀÍø¿¨µÄµØ·½³öÁËÎÊÌâ¡£
·¢ÏÖ²»ÄÜÉèÖÃÍø¿¨²ÎÊý£¬¶øÇÒ¸ü¸ÄµÄÁËÍø¿¨²ÎÊýºó»áËÀ»ú¡£
ÎÒÉÏÍø²éÁ˲»ÉÙ×ÊÁÏ£¬ËµÕâ¸öÍø¿¨ÎÊÌâÊÇfedora 10 µÄͨ²¡¡£
[/font]
[font=·ÂËÎ_GB2312]¾ÍÊÇ×ÓÍøÑÚÂ벿·ÖºÍÍø¹ØÊÇÒ»ÑùµÄ£¬Ò²ÌṩÁËÎÊÌâµÄ½â¾ö°ì·¨¡£
Ò»ÖÖ·½·¨ÊÇ£ºsystem-config-network¹¤¾ß£¬ÓÐͼÐλ¯½çÃæ£¬ÃüÁîÐÐ
Ò»ÖÖ·½·¨ÊÇ£ºÔÚredhatÀïÃæÓÐnetconfigÃüÁî µ«ÊÇfedoraûÓУ¬ÓëÖ®ÏàÓ¦µÄÃüÁîÊÇsetup¡£
Ò»ÖÖ·½·¨ÊÇ£º´¿ÃüÁîÐÐifconfig
×¢Ò⣺ÓÃifconfigÃüÁîÅäÖõÄÍø¿¨ÐÅÏ¢£¬ÔÚÍø¿¨ÖØÆôºó»úÆ÷ÖØÆôºó£¬ÅäÖþͲ»´æÔÚ¡£ÒªÏ뽫ÉÏÊöµÄÅäÖÃÐÅÏ¢ÓÀÔ¶µÄ´æµÄµçÄÔÀÄǾÍÒªÐÞ¸ÄÍø¿¨µÄÅäÖÃÎļþÁË¡£
[/font]
[font=·ÂËÎ_GB2312]µ«ÊÇÎÒÔÚ¾ßÌå×öµÄʱºò£¬·¢ÏÖÔÚÎÒÖØÆôÍøÂçµÄ·þÎñµÄʱºò»úÆ÷»á½©ËÀ¡£
ÏÖÔÚ°ÑÎҵĽØÍ¼·¢À´¿´¿´¡£

[/font][font=·ÂËÎ_GB2312][/size][/font]
[font=·ÂËÎ_GB2312][size=4]
ÏÈ¿´¿´ÍøÂç²ÎÊý£¬Ö»ÓÐÒ»¸ö»·»Ø¡£
[attach]15314[/attach]

ÆôÓÃÍø¿¨£¬¿´¿´²ÎÊý¡£
[attach]15315[/attach]

Ö¸¶¨ipºÍÍøÂçÑÚÂ룬ÎҵĻ·¾³ÊÇͨ¹ý·ÓÉÆ÷ÉÏÍø¡£
[attach]15316[/attach]

ÖØÐÂÆô¶¯ÍøÂç·þÎñ¾ÍËÀ»úÁË¡£ÓÃalt+ctrl+f*Ò²Çл»²»µ½¿ØÖÆÌ¨¡£
[attach]15317[/attach]
[/font]
ÎÄÕÂÆÀÂÛ

¹²ÓÐ 3 ÌõÆÀÂÛ

  1. icecox ÓÚ 2009-05-31 18:14:23·¢±í:

    ÎÒÕâ¸ö±Ê¼Ç±¾µ½Íø¿¨ ÔÚwindowsϵÄʱºò¾Í·¢ÏÖÍø¿¨²»ÄÜÍ£Óᣵ±Ê±Ã»ÓÐÔÚÒ⣬ÏÖÔÚ·¢ÏÖ»¹ÊÇÕâ¸öÎÊÌâ¡£

  2. txwsqk ÓÚ 2009-05-31 17:04:08·¢±í:

    fedoraµÄ network-manager Õâ¸ö·þÎñÓÐÎÊÌâ °ÑËüÍ£ÓÃ
    È»ºóÆôÓà network·þÎñ¾ÍÐÐÁË È»ºóÐÞ¸Ä /etc/sysconfig/network-scripts/ifcfg-eth0ÀïµÄ²ÎÊý¾ÍÐÐÁË

  3. icecox ÓÚ 2009-05-31 14:23:40·¢±í:

    ¸½¼þ1£º

    ¸ÅÊö:

    SELinux is preventing ip (ifconfig_t) "read write" unconfined_t.

    ÏêϸÃèÊö:

    SELinux denied access requested by ip. It is not expected that this access is
    required by ip and this access may signal an intrusion attempt. It is also
    possible that the specific version or configuration of the application is
    causing it to require additional access.

    ÔÊÐí·ÃÎÊ:

    You can generate a local policy module to allow this access - see FAQ
    (http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
    SELinux protection altogether. Disabling SELinux protection is not recommended.
    Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
    against this package.

    ¸½¼ÓÐÅÏ¢:

    Ô´ÉÏÏÂÎÄ unconfined_u:system_r:ifconfig_t:s0
    Ä¿±êÉÏÏÂÎÄ unconfined_u:unconfined_r:unconfined_t:s0
    Ä¿±ê¶ÔÏó socket [ unix_stream_socket ]
    Ô´ ip
    Դ·¾¶ /sbin/ip
    ¶Ë¿Ú <δ֪>
    Ö÷»ú whoami
    Ô´ RPM Èí¼þ°ü iproute-2.6.26-1.fc10
    Ä¿±ê RPM Èí¼þ°ü
    ²ßÂÔ RPM selinux-policy-3.5.13-18.fc10
    ÆôÓÃ Selinux True
    ²ßÂÔÀàÐÍ targeted
    ÆôÓÃ MLS True
    Enforcing ģʽ Enforcing
    ²å¼þÃû³Æ catchall
    Ö÷»úÃû whoami
    ƽ̨ Linux whoami 2.6.27.5-117.fc10.i686 #1 SMP Tue Nov
    18 12:19:59 EST 2008 i686 i686
    ¾¯±¨¼ÆÊý 41
    µÚÒ»¸ö 2009Äê05ÔÂ31ÈÕ ÐÇÆÚÈÕ 11ʱ46·Ö37Ãë
    ×îºóÒ»¸ö 2009Äê05ÔÂ31ÈÕ ÐÇÆÚÈÕ 11ʱ46·Ö58Ãë
    ±¾µØ ID adb3bdad-d7cd-4101-be19-f992f6a70dfe
    ÐкÅ

    ԭʼºË²éÐÅÏ¢

    node=whoami type=AVC msg=audit(1243741618.849:58): avc: denied { read write } for pid=3779 comm="ip" path="socket:[19151]" dev=sockfs ino=19151 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=unix_stream_socket

    node=whoami type=SYSCALL msg=audit(1243741618.849:58): arch=40000003 syscall=11 success=yes exit=0 a0=8fec680 a1=8fbcec8 a2=8fec848 a3=0 items=0 ppid=3768 pid=3779 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=1 comm="ip" exe="/sbin/ip" subj=unconfined_u:system_r:ifconfig_t:s0 key=(null)