[asterisk-dev] Strange issue with permissions and a third party module

Hans-Peter Jansen hpj at urpla.net
Tue Dec 11 12:12:16 CST 2018


On Montag, 10. Dezember 2018 13:07:40 Corey Farrell wrote:
> If using Fedora / similar systems it could be an SELinux policy issue. 
> In Fedora /usr/sbin/asterisk is a confined process where python is not. 
> On Fedora/CentOS SELinux will forbid Asterisk from taking certain
> actions even if allowed by the file system permissions set by chmod. 
> It's possible chan_dongle is doing something that Asterisk / standard
> modules does not do so SELinux would block by default, in which case you
> could use audit2allow to create a custom SELinux module that would grant
> the additional permissions to the asterisk process.

Corey, the system doesn't use any SELinux enforcements, that I know of, and the only 
selinux rudiment is libselinux1, that a bunch of system processes rely on, including 
apparmor.

Oh well.

Thanks,
Pete



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.digium.com/pipermail/asterisk-dev/attachments/20181211/ef95c03d/attachment.html>


More information about the asterisk-dev mailing list