From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 9 May 2013 12:24:37 -0400
Subject: [refpolicy] [PATCH 2/2] Support IPv6 Neighbor Discovery
 Protocol for dhcpcd
In-Reply-To: <20130509161231.GA4209@siphos.be>
References: <1367951826-21257-1-git-send-email-sven.vermeulen@siphos.be>
	<1367951826-21257-3-git-send-email-sven.vermeulen@siphos.be>
	<518BA0A3.5040501@tresys.com> <20130509161231.GA4209@siphos.be>
Message-ID: <518BCDC5.5070300@tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On 05/09/13 12:12, Sven Vermeulen wrote:
> On Thu, May 09, 2013 at 09:12:03AM -0400, Christopher J. PeBenito wrote:
>> On 05/07/13 14:37, Sven Vermeulen wrote:
>>> The dhcpcd client supports IPv6 NDP, but when trying to use it the request fails
>>> with:
>>>
>>>   ipv6rs: Permission denied
>>>
>>> In the audit log, a denial is shown about dhcpc_t wanting to create a
>>> rawip_socket. After allowing this, the client succeeds.
>>
>> Thats odd; I don't see this on my IPv6 system.  Which version of dhcpcd is this seen on?  I'm using 5.6.8.
> 
> I'm using dhcpcd-5.6.4 currently; I use the "-t 5 -L --ipv6ra_own"
> options.

Oh, I'm not using the --ipv6ra_own option.  Maybe thats why I'm not seeing it.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com