OpenVPN / nm-dispatcher blokován Selinux?

Zdravím,

na Fedora 36 chci při připojení OpenVPN klienta zablokovat IPv6 a při odpojení zase povolit. Spojení mám vytvořené v NetworkManageru a používám skript pro nm-dispatcher (/etc/NetworkManager/dispatcher.d/99vpn-ip6-switch)

INTERFACE="$1"
ACTION="$2"

case $ACTION in
    vpn-up)
    sysctl -w net.ipv6.conf.all.disable_ipv6=1
    ;;

    vpn-down)
    sysctl -w net.ipv6.conf.all.disable_ipv6=0
    ;;
esac

exit 0

V Ubuntu 22.04 mi toto řešení funguje. Ve Fedoře jsem objevil v logu:

nm-dispatcher[86717]: req:1 'vpn-pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up>
nm-dispatcher[86717]: req:2 'pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”:>
nm-dispatcher[86717]: req:3 'vpn-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
nm-dispatcher[86717]: req:4 'up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied

A pomocí “sudo ausearch -m AVC,USER_AVC,SELINUX_ERR -ts recent” spoustu:

time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.531:1437): avc:  denied  { execute } for  pid=85336 comm="nm-dispatcher" name="99vpn-ipv6-switch" dev="dm-0" ino=303867 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.531:1438): avc:  denied  { read open } for  pid=85336 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/99vpn-ipv6-switch" dev="dm-0" ino=303867 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.531:1439): avc:  denied  { execute_no_trans } for  pid=85336 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/99vpn-ipv6-switch" dev="dm-0" ino=303867 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.532:1440): avc:  denied  { ioctl } for  pid=85336 comm="99vpn-ipv6-swit" path="/etc/NetworkManager/dispatcher.d/99vpn-ipv6-switch" dev="dm-0" ino=303867 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.532:1441): avc:  denied  { search } for  pid=85337 comm="sysctl" name="net" dev="proc" ino=20580 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.532:1442): avc:  denied  { getattr } for  pid=85337 comm="sysctl" path="/proc/sys/net/ipv6/conf/all/disable_ipv6" dev="proc" ino=698585 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.532:1443): avc:  denied  { write } for  pid=85337 comm="sysctl" name="disable_ipv6" dev="proc" ino=698585 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file permissive=1
----
time->Fri Apr 22 11:56:28 2022
type=AVC msg=audit(1650621388.532:1444): avc:  denied  { open } for  pid=85337 comm="sysctl" path="/proc/sys/net/ipv6/conf/all/disable_ipv6" dev="proc" ino=698585 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file permissive=1

Po nějakém gůglení jsem objevil, že dispatcher by měl obsahovat attribut (nebo jak se to jmenuje) NetworkManager_dispatcher_script_t, což má:

$ ls -Z
system_u:object_r:NetworkManager_dispatcher_script_t:s0 no-wait.d
system_u:object_r:NetworkManager_dispatcher_script_t:s0 pre-up.d
system_u:object_r:NetworkManager_dispatcher_script_t:s0 pre-down.d
unconfined_u:object_r:NetworkManager_dispatcher_script_t:s0 99vpn-ipv6-switch
``

Jak přemluvím Selinux, ať ten můj skript nechá na pokoji?

Mám selinux povolený, ale překvapivě (viz ‘unlabeled’) vidím u sebe tyto hodnoty (F36 - Silverblue):

$ ls -Z /etc/NetworkManager/dispatcher.d/
system_u:object_r:unlabeled_t:s0 no-wait.d
system_u:object_r:unlabeled_t:s0 pre-up.d
system_u:object_r:unlabeled_t:s0 pre-down.d

Doporučuji ještě zkusit opravit selinux context na tom souboru pomocí:

$ sudo restorecon -FvvR /etc/NetworkManager/dispatcher.d/99vpn-ip6-switch

Provedeno

$ sudo restorecon -FvvR /etc/NetworkManager/dispatcher.d/99vpn-ipv6-switch 
Relabeled /etc/NetworkManager/dispatcher.d/99vpn-ipv6-switch from unconfined_u:object_r:NetworkManager_dispatcher_script_t:s0 to system_u:object_r:NetworkManager_dispatcher_script_t:s0

$ ls -Z
system_u:object_r:NetworkManager_dispatcher_script_t:s0 no-wait.d   system_u:object_r:NetworkManager_dispatcher_script_t:s0 pre-up.d
system_u:object_r:NetworkManager_dispatcher_script_t:s0 pre-down.d  system_u:object_r:NetworkManager_dispatcher_script_t:s0 99vpn-ipv6-switch

Pořád blokováno.

Tak oprava, v ausearch nejsou aktuální zprávy o blokování, nicméně dispatcher scripty pořád nejsou spouštěny. Navíc iniciace spojení nestabilní. Někdy naběhne, někd ne. Při úspěšné aktivaci výpis journalctl:

dub 24 09:20:09 fedora NetworkManager[192188]: <info>  [1650784809.4652] vpn[0x5555bb1820b0,1d17b550-2a40-447b-986d-2b3e842d6640,"VPN"]: starting openvpn
dub 24 09:20:09 fedora NetworkManager[192188]: <info>  [1650784809.4660] audit: op="connection-activate" uuid="1d17b550-2a40-447b-986d-2b3e842d6640" name="VPN" pid=2582 uid=1000 result="success"
dub 24 09:20:09 fedora nm-openvpn[197971]: --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
dub 24 09:20:09 fedora nm-openvpn[197971]: OpenVPN 2.5.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 16 2022
dub 24 09:20:09 fedora nm-openvpn[197971]: library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
dub 24 09:20:09 fedora nm-openvpn[197971]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
dub 24 09:20:09 fedora nm-openvpn[197971]: TCP/UDP: Preserving recently used remote address: [AF_INET]178.255.173.211:1194
dub 24 09:20:09 fedora nm-openvpn[197971]: UDP link local: (not bound)
dub 24 09:20:09 fedora nm-openvpn[197971]: UDP link remote: [AF_INET]178.255.173.211:1194
dub 24 09:20:09 fedora nm-openvpn[197971]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
dub 24 09:20:09 fedora nm-openvpn[197971]: [turris] Peer Connection Initiated with [AF_INET]178.255.173.211:1194
dub 24 09:20:11 fedora nm-openvpn[197971]: TUN/TAP device tun_turris opened
dub 24 09:20:11 fedora nm-openvpn[197971]: /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 197967 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_2 --tun -- tun_turris 1500 1552 xxx.xxx.xxx.xxx 255.255.255.0 init
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1047] manager: (tun_turris): new Tun device (/org/freedesktop/NetworkManager/Devices/5)
dub 24 09:20:11 fedora systemd-udevd[197979]: Using default interface naming scheme 'v250'.
dub 24 09:20:11 fedora nm-openvpn[197971]: GID set to nm-openvpn
dub 24 09:20:11 fedora nm-openvpn[197971]: UID set to nm-openvpn
dub 24 09:20:11 fedora nm-openvpn[197971]: Initialization Sequence Completed
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1170] device (tun_turris): state change: unmanaged -> unavailable (reason 'connection-assumed', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1181] device (tun_turris): state change: unavailable -> disconnected (reason 'connection-assumed', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1186] device (tun_turris): Activation: starting connection 'tun_turris' (0f266041-db88-4afd-b581-95c33d26ec67)
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1201] device (tun_turris): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1203] device (tun_turris): state change: prepare -> config (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1205] device (tun_turris): state change: config -> ip-config (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1216] device (tun_turris): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora systemd[1]: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...
dub 24 09:20:11 fedora systemd[1]: Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.
dub 24 09:20:11 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:20:11 fedora nm-dispatcher[197990]: req:1 'vpn-pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”: Permission denied
dub 24 09:20:11 fedora nm-dispatcher[197990]: req:2 'pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”: Permission denied
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1297] policy: set 'VPN' (tun_turris) as default for IPv4 routing and DNS
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1311] device (tun_turris): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1313] device (tun_turris): state change: secondaries -> activated (reason 'none', sys-iface-state: 'external')
dub 24 09:20:11 fedora NetworkManager[192188]: <info>  [1650784811.1316] device (tun_turris): Activation: successful, device activated.
dub 24 09:20:11 fedora nm-dispatcher[197990]: req:3 'vpn-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:20:11 fedora systemd-resolved[1572]: wlo1: Bus client set default route setting: no
dub 24 09:20:11 fedora systemd-resolved[1572]: wlo1: Bus client reset DNS server list.
dub 24 09:20:11 fedora nm-dispatcher[197990]: req:4 'up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:20:11 fedora systemd-resolved[1572]: tun_turris: Bus client set default route setting: yes
dub 24 09:20:11 fedora systemd-resolved[1572]: tun_turris: Bus client set DNS server list to: 10.111.111.1
dub 24 09:20:11 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
dub 24 09:20:11 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
dub 24 09:20:13 fedora systemd[1]: systemd-hostnamed.service: Deactivated successfully.
dub 24 09:20:13 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:20:13 fedora audit: BPF prog-id=0 op=UNLOAD
dub 24 09:20:13 fedora audit: BPF prog-id=0 op=UNLOAD
dub 24 09:20:21 fedora systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.
dub 24 09:20:21 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

A při core dump Network-Manageru:

dub 24 08:59:59 fedora NetworkManager[190204]: <info>  [1650783599.8648] audit: op="connection-activate" uuid="1d17b550-2a40-447b-986d-2b3e842d6640" name="VPN" pid=2582 uid=1000 result="success"
dub 24 08:59:59 fedora nm-openvpn[192076]: --cipher is not set. Previous OpenVPN version defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
dub 24 08:59:59 fedora nm-openvpn[192076]: OpenVPN 2.5.6 x86_64-redhat-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [PKCS11] [MH/PKTINFO] [AEAD] built on Mar 16 2022
dub 24 08:59:59 fedora nm-openvpn[192076]: library versions: OpenSSL 3.0.2 15 Mar 2022, LZO 2.10
dub 24 08:59:59 fedora nm-openvpn[192076]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
dub 24 08:59:59 fedora nm-openvpn[192076]: TCP/UDP: Preserving recently used remote address: [AF_INET]178.255.173.211:1194
dub 24 08:59:59 fedora nm-openvpn[192076]: UDP link local: (not bound)
dub 24 08:59:59 fedora nm-openvpn[192076]: UDP link remote: [AF_INET]178.255.173.211:1194
dub 24 08:59:59 fedora nm-openvpn[192076]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
dub 24 09:00:00 fedora nm-openvpn[192076]: [turris] Peer Connection Initiated with [AF_INET]178.255.173.211:1194
dub 24 09:00:01 fedora nm-openvpn[192076]: TUN/TAP device tun_turris opened
dub 24 09:00:01 fedora nm-openvpn[192076]: /usr/libexec/nm-openvpn-service-openvpn-helper --debug 0 192072 --bus-name org.freedesktop.NetworkManager.openvpn.Connection_3 --tun -- tun_turris 1500 1552 xxx.xxx.xxx.xxx 255.255.255.0 init
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.5850] manager: (tun_turris): new Tun device (/org/freedesktop/NetworkManager/Devices/6)
dub 24 09:00:01 fedora systemd-udevd[192085]: Using default interface naming scheme 'v250'.
dub 24 09:00:01 fedora nm-openvpn[192076]: GID set to nm-openvpn
dub 24 09:00:01 fedora nm-openvpn[192076]: UID set to nm-openvpn
dub 24 09:00:01 fedora nm-openvpn[192076]: Initialization Sequence Completed
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6020] device (tun_turris): state change: unmanaged -> unavailable (reason 'connection-assumed', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6026] device (tun_turris): state change: unavailable -> disconnected (reason 'connection-assumed', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6036] device (tun_turris): Activation: starting connection 'tun_turris' (676d1b9d-4468-479c-a306-8fa80e52eb11)
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6063] device (tun_turris): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6066] device (tun_turris): state change: prepare -> config (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6073] device (tun_turris): state change: config -> ip-config (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora systemd[1]: Starting NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service...
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6077] device (tun_turris): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora systemd[1]: Started NetworkManager-dispatcher.service - Network Manager Script Dispatcher Service.
dub 24 09:00:01 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-dispatcher comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:01 fedora nm-dispatcher[192096]: req:1 'vpn-pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”: Permission denied
dub 24 09:00:01 fedora nm-dispatcher[192096]: req:2 'pre-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”: Permission denied
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6174] policy: set 'VPN' (tun_turris) as default for IPv4 routing and DNS
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6193] device (tun_turris): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6195] device (tun_turris): state change: secondaries -> activated (reason 'none', sys-iface-state: 'external')
dub 24 09:00:01 fedora NetworkManager[190204]: <info>  [1650783601.6199] device (tun_turris): Activation: successful, device activated.
dub 24 09:00:01 fedora nm-dispatcher[192096]: req:3 'vpn-up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:01 fedora systemd-resolved[1572]: wlo1: Bus client set default route setting: no
dub 24 09:00:01 fedora nm-dispatcher[192096]: req:4 'up' [tun_turris]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:01 fedora systemd-resolved[1572]: wlo1: Bus client reset DNS server list.
dub 24 09:00:01 fedora systemd-resolved[1572]: tun_turris: Bus client set default route setting: yes
dub 24 09:00:01 fedora systemd-resolved[1572]: tun_turris: Bus client set DNS server list to: 10.111.111.1
dub 24 09:00:01 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
dub 24 09:00:01 fedora audit[190204]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0 pid=190204 comm="NetworkManager" exe="/usr/sbin/NetworkManager" sig=11 res=1
dub 24 09:00:01 fedora kernel: NetworkManager[190204]: segfault at 0 ip 000055af266da2a7 sp 00007fff7b6ccdb0 error 6 in NetworkManager[55af265ce000+252000]
dub 24 09:00:01 fedora kernel: Code: 00 00 90 41 56 41 55 41 54 49 89 d4 55 89 f5 53 48 8b 47 08 48 89 fb 48 8b 17 4c 8b 77 10 48 c7 47 10 00 00 00 00 48 89 42 08 <48> 89 10 48 8b 7f 58 48 85 ff 0f 84 99 00 00 00 31 d2 be 2b 4e 00
dub 24 09:00:01 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
dub 24 09:00:01 fedora audit: BPF prog-id=221 op=LOAD
dub 24 09:00:01 fedora audit: BPF prog-id=222 op=LOAD
dub 24 09:00:01 fedora audit: BPF prog-id=223 op=LOAD
dub 24 09:00:01 fedora systemd[1]: Started systemd-coredump@2-192108-0.service - Process Core Dump (PID 192108/UID 0).
dub 24 09:00:01 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@2-192108-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:01 fedora [192117]: [164B blob data]
dub 24 09:00:01 fedora systemd-coredump[192115]: Process 190204 (NetworkManager) of user 0 dumped core.
                                                 
                                                 Module linux-vdso.so.1 with build-id 1be9a4a113c22b24e0ff29bd8645b863d7ad8c45
                                                 Module libm.so.6 with build-id 2c5afe11116cc85e21a8d87e6f52a481efefa1d1
                                                 Module libnss_resolve.so.2 with build-id 24eb693389d2fadb98e93c9456d656586d354488
                                                 Metadata for module libnss_resolve.so.2 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "systemd",
                                                         "version" : "250.3-8.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnss_mdns4_minimal.so.2 with build-id fe461d55e34f82892fff98869493b1faba410e52
                                                 Metadata for module libnss_mdns4_minimal.so.2 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "nss-mdns",
                                                         "version" : "0.15.1-5.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnss_myhostname.so.2 with build-id 703bc33d589c807dd4ea672c691b741092fb913c
                                                 Metadata for module libnss_myhostname.so.2 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "systemd",
                                                         "version" : "250.3-8.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-device-plugin-wifi.so with build-id 4af0c5bf72bc29494d77b1ecf9514cb6612bb9fb
                                                 Metadata for module libnm-device-plugin-wifi.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libdbus-1.so.3 with build-id 180fe9c567fe8c90bdbe2a2c9316ef745621e4b2
                                                 Metadata for module libdbus-1.so.3 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "dbus",
                                                         "version" : "1.14.0-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libjansson.so.4 with build-id 010af6973aaad1eeae9a500bbab83738aa22fbbe
                                                 Metadata for module libjansson.so.4 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "jansson",
                                                         "version" : "2.13.1-4.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libteamdctl.so.0 with build-id 3e0a27f81f0ce295b66274c069aa60d2ff8dd669
                                                 Metadata for module libteamdctl.so.0 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "libteam",
                                                         "version" : "1.31-5.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-device-plugin-team.so with build-id 2648e0e8b0a3c4d3f449d1092e7bea75a9697eb1
                                                 Metadata for module libnm-device-plugin-team.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-device-plugin-wwan.so with build-id f53c21fd19541cdbb046156f84cebca2b625f06f
                                                 Metadata for module libnm-device-plugin-wwan.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libmm-glib.so.0 with build-id bfd8f91c21f745505dbd043fc7b39cabd8baa464
                                                 Metadata for module libmm-glib.so.0 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "ModemManager",
                                                         "version" : "1.18.6-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-wwan.so with build-id 206840f7f73fc1268351d2f33c5e9d912fa6aff6
                                                 Metadata for module libnm-wwan.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libbluetooth.so.3 with build-id d62a2fc155464aec87996ae84c45abae05bc4d3e
                                                 Metadata for module libbluetooth.so.3 owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "bluez",
                                                         "version" : "5.64-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-device-plugin-bluetooth.so with build-id a274132303d8fc6bb830f85005402b81d3091efc
                                                 Metadata for module libnm-device-plugin-bluetooth.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libnm-device-plugin-adsl.so with build-id 01ea6ce2643a6ad95ab6ee6dbfa8b1f4c4a5e23d
                                                 Metadata for module libnm-device-plugin-adsl.so owned by FDO found: {
                                                         "type" : "rpm",
                                                         "name" : "NetworkManager",
                                                         "version" : "1.37.90-1.fc36",
                                                         "architecture" : "x86_64",
                                                         "osCpe" : "cpe:/o:fedoraproject:fedora:36"
                                                 }
                                                 
                                                 Module libcrypt.so.2 with build-id 9924d3a82ca8fa6b94bc574a6520bcf84ccf831f
                                                 Stack trace of thread 190204:
                                                 #0  0x000055af266da2a7 cb_data_complete (NetworkManager + 0x1472a7)
                                                 #1  0x000055af266db453 system_resolver_resolve_cb (NetworkManager + 0x148453)
                                                 #2  0x00007f60729f2caa g_task_return_now (libgio-2.0.so.0 + 0xb1caa)
                                                 #3  0x00007f60729f2ced complete_in_idle_cb (libgio-2.0.so.0 + 0xb1ced)
                                                 #4  0x00007f60727f046b g_idle_dispatch (libglib-2.0.so.0 + 0x5146b)
                                                 #5  0x00007f60727f3f4f g_main_context_dispatch (libglib-2.0.so.0 + 0x54f4f)
                                                 #6  0x00007f6072849168 g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa168)
                                                 #7  0x00007f60727f366f g_main_loop_run (libglib-2.0.so.0 + 0x5466f)
                                                 #8  0x000055af265e6869 main (NetworkManager + 0x53869)
                                                 #9  0x00007f60725a8590 __libc_start_call_main (libc.so.6 + 0x2d590)
                                                 #10 0x00007f60725a8649 __libc_start_main@@GLIBC_2.34 (libc.so.6 + 0x2d649)
                                                 #11 0x000055af265e6fc5 _start (NetworkManager + 0x53fc5)
                                                 
                                                 Stack trace of thread 190209:
                                                 #0  0x00007f6072a43654 g_dbus_connection_get_type (libgio-2.0.so.0 + 0x102654)
                                                 #1  0x00007f6072a44ff3 on_worker_message_about_to_be_sent (libgio-2.0.so.0 + 0x103ff3)
                                                 #2  0x00007f6072a5e985 continue_writing (libgio-2.0.so.0 + 0x11d985)
                                                 #3  0x00007f6072a5ec91 continue_writing_in_idle_cb (libgio-2.0.so.0 + 0x11dc91)
                                                 #4  0x00007f60727f046b g_idle_dispatch (libglib-2.0.so.0 + 0x5146b)
                                                 #5  0x00007f60727f3f4f g_main_context_dispatch (libglib-2.0.so.0 + 0x54f4f)
                                                 #6  0x00007f6072849168 g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa168)
                                                 #7  0x00007f60727f366f g_main_loop_run (libglib-2.0.so.0 + 0x5466f)
                                                 #8  0x00007f6072a5563a gdbus_shared_thread_func.lto_priv.0 (libgio-2.0.so.0 + 0x11463a)
                                                 #9  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #10 0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #11 0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 
                                                 Stack trace of thread 192095:
                                                 #0  0x00007f607268a59d syscall (libc.so.6 + 0x10f59d)
                                                 #1  0x00007f6072844870 g_cond_wait_until (libglib-2.0.so.0 + 0xa5870)
                                                 #2  0x00007f60727c3ef1 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x24ef1)
                                                 #3  0x00007f6072820bca g_thread_pool_thread_proxy.lto_priv.0 (libglib-2.0.so.0 + 0x81bca)
                                                 #4  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #5  0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #6  0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 
                                                 Stack trace of thread 192093:
                                                 #0  0x00007f607268a59d syscall (libc.so.6 + 0x10f59d)
                                                 #1  0x00007f6072844870 g_cond_wait_until (libglib-2.0.so.0 + 0xa5870)
                                                 #2  0x00007f60727c3ef1 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x24ef1)
                                                 #3  0x00007f6072820bca g_thread_pool_thread_proxy.lto_priv.0 (libglib-2.0.so.0 + 0x81bca)
                                                 #4  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #5  0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #6  0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 
                                                 Stack trace of thread 192092:
                                                 #0  0x00007f607268a59d syscall (libc.so.6 + 0x10f59d)
                                                 #1  0x00007f6072844870 g_cond_wait_until (libglib-2.0.so.0 + 0xa5870)
                                                 #2  0x00007f60727c3ef1 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x24ef1)
                                                 #3  0x00007f6072820bca g_thread_pool_thread_proxy.lto_priv.0 (libglib-2.0.so.0 + 0x81bca)
                                                 #4  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #5  0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #6  0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 
                                                 Stack trace of thread 192094:
                                                 #0  0x00007f607268a59d syscall (libc.so.6 + 0x10f59d)
                                                 #1  0x00007f6072844870 g_cond_wait_until (libglib-2.0.so.0 + 0xa5870)
                                                 #2  0x00007f60727c3ef1 g_async_queue_pop_intern_unlocked (libglib-2.0.so.0 + 0x24ef1)
                                                 #3  0x00007f6072820bca g_thread_pool_thread_proxy.lto_priv.0 (libglib-2.0.so.0 + 0x81bca)
                                                 #4  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #5  0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #6  0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 
                                                 Stack trace of thread 190208:
                                                 #0  0x00007f6072684e8f __poll (libc.so.6 + 0x109e8f)
                                                 #1  0x00007f60728490dd g_main_context_iterate.constprop.0 (libglib-2.0.so.0 + 0xaa0dd)
                                                 #2  0x00007f60727f18e0 g_main_context_iteration (libglib-2.0.so.0 + 0x528e0)
                                                 #3  0x00007f60727f1931 glib_worker_main (libglib-2.0.so.0 + 0x52931)
                                                 #4  0x00007f607281e172 g_thread_proxy (libglib-2.0.so.0 + 0x7f172)
                                                 #5  0x00007f607260c017 start_thread (libc.so.6 + 0x91017)
                                                 #6  0x00007f60726916d0 __clone3 (libc.so.6 + 0x1166d0)
                                                 ELF object binary architecture: AMD x86-64
dub 24 09:00:01 fedora systemd[1]: systemd-coredump@2-192108-0.service: Deactivated successfully.
dub 24 09:00:01 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-coredump@2-192108-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:01 fedora systemd[1]: NetworkManager.service: Main process exited, code=dumped, status=11/SEGV
dub 24 09:00:01 fedora systemd[1]: NetworkManager.service: Failed with result 'core-dump'.
dub 24 09:00:01 fedora systemd[1]: NetworkManager.service: Unit process 192072 (nm-openvpn-serv) remains running after unit stopped.
dub 24 09:00:01 fedora systemd[1]: NetworkManager.service: Unit process 192076 (openvpn) remains running after unit stopped.
dub 24 09:00:01 fedora nm-openvpn[192076]: event_wait : Interrupted system call (code=4)
dub 24 09:00:01 fedora nm-openvpn[192076]: SIGTERM received, sending exit notification to peer
dub 24 09:00:01 fedora gnome-shell[2582]: Removing a network device that was not added
dub 24 09:00:01 fedora gnome-shell[2582]: Removing a network device that was not added
dub 24 09:00:01 fedora gnome-shell[2582]: Removing a network device that was not added
dub 24 09:00:01 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
dub 24 09:00:01 fedora audit: BPF prog-id=0 op=UNLOAD
dub 24 09:00:01 fedora audit: BPF prog-id=0 op=UNLOAD
dub 24 09:00:01 fedora audit: BPF prog-id=0 op=UNLOAD
dub 24 09:00:02 fedora nm-openvpn[192076]: net_addr_v4_del: xxx.xxx.xxx.xxx dev tun_turris
dub 24 09:00:02 fedora nm-openvpn[192076]: sitnl_send: rtnl: generic error (-1): Operation not permitted
dub 24 09:00:02 fedora nm-openvpn[192076]: Linux can't del IP from iface tun_turris
dub 24 09:00:02 fedora systemd[1]: NetworkManager.service: Scheduled restart job, restart counter is at 3.
dub 24 09:00:02 fedora systemd[1]: NetworkManager-wait-online.service: Deactivated successfully.
dub 24 09:00:02 fedora systemd[1]: Stopped NetworkManager-wait-online.service - Network Manager Wait Online.
dub 24 09:00:02 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:02 fedora systemd[1]: Stopping NetworkManager-wait-online.service - Network Manager Wait Online...
dub 24 09:00:02 fedora nm-openvpn[192076]: SIGTERM[soft,exit-with-notification] received, process exiting

A zbytek:

dub 24 09:00:02 fedora systemd[1]: Stopped NetworkManager.service - Network Manager.
dub 24 09:00:02 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:02 fedora audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:02 fedora systemd[1]: Starting NetworkManager.service - Network Manager...
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.1788] NetworkManager (version 1.37.90-1.fc36) is starting... (after a restart)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.1791] Read config: /etc/NetworkManager/NetworkManager.conf (lib: 20-connectivity-fedora.conf)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.1808] bus-manager: acquired D-Bus service "org.freedesktop.NetworkManager"
dub 24 09:00:02 fedora systemd[1]: Started NetworkManager.service - Network Manager.
dub 24 09:00:02 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:02 fedora systemd[1]: Starting NetworkManager-wait-online.service - Network Manager Wait Online...
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.1849] manager[0x5555bb0b2020]: monitoring kernel firmware directory '/lib/firmware'.
dub 24 09:00:02 fedora audit: BPF prog-id=224 op=LOAD
dub 24 09:00:02 fedora audit: BPF prog-id=225 op=LOAD
dub 24 09:00:02 fedora systemd[1]: Starting systemd-hostnamed.service - Hostname Service...
dub 24 09:00:02 fedora abrt-server[192124]: Deleting problem directory ccpp-2022-04-24-09:00:01.848624-190204 (dup of ccpp-2022-04-14-18:48:40.564126-1327)
dub 24 09:00:02 fedora systemd[1]: Started systemd-hostnamed.service - Hostname Service.
dub 24 09:00:02 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-hostnamed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2312] hostname: hostname: using hostnamed
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2313] hostname: static hostname changed from (none) to "fedora"
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2316] dns-mgr[0x5555bb07f250]: init: dns=systemd-resolved rc-manager=unmanaged (auto), plugin=systemd-resolved
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2324] rfkill1: found Wi-Fi radio killswitch (at /sys/devices/pci0000:00/0000:00:02.2/0000:03:00.0/ieee80211/phy0/rfkill1) (driver iwlwifi)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2328] manager[0x5555bb0b2020]: rfkill: Wi-Fi hardware radio set enabled
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2328] manager[0x5555bb0b2020]: rfkill: WWAN hardware radio set enabled
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2345] Loaded device plugin: NMAtmManager (/usr/lib64/NetworkManager/1.37.90-1.fc36/libnm-device-plugin-adsl.so)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2359] Loaded device plugin: NMBluezManager (/usr/lib64/NetworkManager/1.37.90-1.fc36/libnm-device-plugin-bluetooth.so)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2360] Loaded device plugin: NMWwanFactory (/usr/lib64/NetworkManager/1.37.90-1.fc36/libnm-device-plugin-wwan.so)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2366] Loaded device plugin: NMTeamFactory (/usr/lib64/NetworkManager/1.37.90-1.fc36/libnm-device-plugin-team.so)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2368] Loaded device plugin: NMWifiFactory (/usr/lib64/NetworkManager/1.37.90-1.fc36/libnm-device-plugin-wifi.so)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2371] manager: rfkill: Wi-Fi enabled by radio killswitch; enabled by state file
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2371] manager: rfkill: WWAN enabled by radio killswitch; enabled by state file
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2372] manager: Networking is enabled by state file
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2373] settings: Loaded settings plugin: keyfile (internal)
dub 24 09:00:02 fedora nm-dispatcher[192096]: req:5 'hostname': find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2400] dhcp-init: Using DHCP client 'internal'
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2400] device (lo): carrier: link connected
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2403] manager: (lo): new Generic device (/org/freedesktop/NetworkManager/Devices/1)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2415] manager: (enp2s0): new Ethernet device (/org/freedesktop/NetworkManager/Devices/2)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2419] device (enp2s0): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2434] device (wlo1): driver supports Access Point (AP) mode
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2441] manager: (wlo1): new 802.11 Wi-Fi device (/org/freedesktop/NetworkManager/Devices/3)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2445] device (wlo1): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
dub 24 09:00:02 fedora avahi-daemon[1602]: Withdrawing address record for 2a02:810b:c63f:b7f0::be66 on wlo1.
dub 24 09:00:02 fedora avahi-daemon[1602]: Withdrawing address record for 2a02:810b:c63f:b7f0:f1bb:4f69:1c75:5853 on wlo1.
dub 24 09:00:02 fedora avahi-daemon[1602]: Leaving mDNS multicast group on interface wlo1.IPv6 with address 2a02:810b:c63f:b7f0:f1bb:4f69:1c75:5853.
dub 24 09:00:02 fedora avahi-daemon[1602]: Joining mDNS multicast group on interface wlo1.IPv6 with address fe80::3665:72d3:5d40:5a7c.
dub 24 09:00:02 fedora avahi-daemon[1602]: Registering new address record for fe80::3665:72d3:5d40:5a7c on wlo1.*.
dub 24 09:00:02 fedora avahi-daemon[1602]: Withdrawing address record for fe80::3665:72d3:5d40:5a7c on wlo1.
dub 24 09:00:02 fedora avahi-daemon[1602]: Leaving mDNS multicast group on interface wlo1.IPv6 with address fe80::3665:72d3:5d40:5a7c.
dub 24 09:00:02 fedora avahi-daemon[1602]: Interface wlo1.IPv6 no longer relevant for mDNS.
dub 24 09:00:02 fedora avahi-daemon[1602]: Withdrawing address record for 192.168.0.175 on wlo1.
dub 24 09:00:02 fedora avahi-daemon[1602]: Leaving mDNS multicast group on interface wlo1.IPv4 with address 192.168.0.175.
dub 24 09:00:02 fedora avahi-daemon[1602]: Interface wlo1.IPv4 no longer relevant for mDNS.
dub 24 09:00:02 fedora kernel: wlo1: deauthenticating from 6c:55:e8:57:af:98 by local choice (Reason: 3=DEAUTH_LEAVING)
dub 24 09:00:02 fedora wpa_supplicant[1811]: wlo1: CTRL-EVENT-DISCONNECTED bssid=6c:55:e8:57:af:98 reason=3 locally_generated=1
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2766] device (wlo1): set-hw-addr: set MAC address to 42:A7:AB:AA:35:1D (scanning)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2916] modem-manager: ModemManager available
dub 24 09:00:02 fedora nm-dispatcher[192096]: req:6 'connectivity-change': find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2979] device (wlo1): supplicant interface state: internal-starting -> disconnected
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2980] Wi-Fi P2P device controlled by interface wlo1 created
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2983] manager: (p2p-dev-wlo1): new 802.11 Wi-Fi P2P device (/org/freedesktop/NetworkManager/Devices/4)
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2984] device (p2p-dev-wlo1): state change: unmanaged -> unavailable (reason 'managed', sys-iface-state: 'external')
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2990] device (wlo1): state change: unavailable -> disconnected (reason 'supplicant-available', sys-iface-state: 'managed')
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.2999] device (p2p-dev-wlo1): state change: unavailable -> disconnected (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:02 fedora chronyd[1661]: Source 2001:638:502:c015::231 offline
dub 24 09:00:02 fedora chronyd[1661]: Source 192.168.0.1 offline
dub 24 09:00:02 fedora chronyd[1661]: Source 2a03:4000:13:34f::2 offline
dub 24 09:00:02 fedora chronyd[1661]: Source 49.12.125.53 offline
dub 24 09:00:02 fedora chronyd[1661]: Can't synchronise: no selectable sources
dub 24 09:00:02 fedora chronyd[1661]: Source 2a03:4000:4e:9ed:34db:7bff:feea:4253 offline
dub 24 09:00:02 fedora NetworkManager[192188]: <info>  [1650783602.3194] agent-manager: agent[f70f567fb6c8e960,:1.79/org.gnome.Shell.NetworkAgent/1000]: agent registered
dub 24 09:00:02 fedora abrt-notification[192226]: Process 1327 (NetworkManager) crashed in cb_data_complete()
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3051] policy: auto-activating connection 'Vodafone-AF8C' (e47efc29-a645-469e-91ac-9b1cc9fb6c6d)
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3059] device (wlo1): Activation: starting connection 'Vodafone-AF8C' (e47efc29-a645-469e-91ac-9b1cc9fb6c6d)
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3061] device (wlo1): state change: disconnected -> prepare (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3065] manager: NetworkManager state is now CONNECTING
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3098] device (wlo1): set-hw-addr: reset MAC address to 48:68:4A:4D:0D:4B (preserve)
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3130] device (wlo1): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3132] device (wlo1): Activation: (wifi) access point 'Vodafone-AF8C' has security, but secrets are required.
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3132] device (wlo1): state change: config -> need-auth (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3141] device (wlo1): state change: need-auth -> prepare (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3142] device (wlo1): state change: prepare -> config (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3143] device (wlo1): Activation: (wifi) connection 'Vodafone-AF8C' has security, and secrets exist.  No new secrets needed.
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3143] Config: added 'ssid' value 'Vodafone-AF8C'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3144] Config: added 'scan_ssid' value '1'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3144] Config: added 'bgscan' value 'simple:30:-70:86400'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3144] Config: added 'key_mgmt' value 'WPA-PSK WPA-PSK-SHA256 FT-PSK SAE FT-SAE'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3144] Config: added 'auth_alg' value 'OPEN'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3144] Config: added 'psk' value '<hidden>'
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3279] device (wlo1): supplicant interface state: disconnected -> scanning
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3279] device (p2p-dev-wlo1): supplicant management interface state: disconnected -> scanning
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: SME: Trying to authenticate with 6c:55:e8:57:af:98 (SSID='Vodafone-AF8C' freq=5240 MHz)
dub 24 09:00:04 fedora kernel: wlo1: authenticate with 6c:55:e8:57:af:98
dub 24 09:00:04 fedora kernel: wlo1: send auth to 6c:55:e8:57:af:98 (try 1/3)
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3433] device (wlo1): supplicant interface state: scanning -> authenticating
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3434] device (p2p-dev-wlo1): supplicant management interface state: scanning -> authenticating
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: Trying to associate with 6c:55:e8:57:af:98 (SSID='Vodafone-AF8C' freq=5240 MHz)
dub 24 09:00:04 fedora kernel: wlo1: authenticated
dub 24 09:00:04 fedora kernel: wlo1: associate with 6c:55:e8:57:af:98 (try 1/3)
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3735] device (wlo1): supplicant interface state: authenticating -> associating
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.3735] device (p2p-dev-wlo1): supplicant management interface state: authenticating -> associating
dub 24 09:00:04 fedora kernel: wlo1: RX AssocResp from 6c:55:e8:57:af:98 (capab=0x11 status=0 aid=3)
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: Associated with 6c:55:e8:57:af:98
dub 24 09:00:04 fedora kernel: wlo1: associated
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4067] device (wlo1): supplicant interface state: associating -> 4way_handshake
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4067] device (p2p-dev-wlo1): supplicant management interface state: associating -> 4way_handshake
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: WPA: Key negotiation completed with 6c:55:e8:57:af:98 [PTK=CCMP GTK=CCMP]
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: CTRL-EVENT-CONNECTED - Connection to 6c:55:e8:57:af:98 completed [id=2 id_str=]
dub 24 09:00:04 fedora kernel: IPv6: ADDRCONF(NETDEV_CHANGE): wlo1: link becomes ready
dub 24 09:00:04 fedora kernel: wlo1: Limiting TX power to 23 (23 - 0) dBm as advertised by 6c:55:e8:57:af:98
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4526] device (wlo1): supplicant interface state: 4way_handshake -> completed
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4526] device (wlo1): Activation: (wifi) Stage 2 of 5 (Device Configure) successful. Connected to wireless network "Vodafone-AF8C"
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4527] device (p2p-dev-wlo1): supplicant management interface state: 4way_handshake -> completed
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: CTRL-EVENT-SIGNAL-CHANGE above=1 signal=-51 noise=9999 txrate=234000
dub 24 09:00:04 fedora wpa_supplicant[1811]: wlo1: CTRL-EVENT-SIGNAL-CHANGE above=1 signal=-51 noise=9999 txrate=234000
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4562] device (wlo1): state change: config -> ip-config (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.4568] dhcp4 (wlo1): activation: beginning transaction (timeout in 45 seconds)
dub 24 09:00:04 fedora avahi-daemon[1602]: Joining mDNS multicast group on interface wlo1.IPv6 with address fe80::3665:72d3:5d40:5a7c.
dub 24 09:00:04 fedora avahi-daemon[1602]: New relevant interface wlo1.IPv6 for mDNS.
dub 24 09:00:04 fedora avahi-daemon[1602]: Registering new address record for fe80::3665:72d3:5d40:5a7c on wlo1.*.
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5169] dhcp4 (wlo1): state changed new lease, address=192.168.0.175
dub 24 09:00:04 fedora avahi-daemon[1602]: Joining mDNS multicast group on interface wlo1.IPv4 with address 192.168.0.175.
dub 24 09:00:04 fedora avahi-daemon[1602]: New relevant interface wlo1.IPv4 for mDNS.
dub 24 09:00:04 fedora avahi-daemon[1602]: Registering new address record for 192.168.0.175 on wlo1.IPv4.
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5227] device (wlo1): state change: ip-config -> ip-check (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora nm-dispatcher[192096]: req:7 'dhcp4-change' [wlo1]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:04 fedora nm-dispatcher[192096]: req:8 'pre-up' [wlo1]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d/pre-up.d': Error opening directory “/etc/NetworkManager/dispatcher.d/pre-up.d”: Permission denied
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5256] device (wlo1): state change: ip-check -> secondaries (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5261] device (wlo1): state change: secondaries -> activated (reason 'none', sys-iface-state: 'managed')
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5266] manager: NetworkManager state is now CONNECTED_LOCAL
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5280] manager: NetworkManager state is now CONNECTED_SITE
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5282] policy: set 'Vodafone-AF8C' (wlo1) as default for IPv4 routing and DNS
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.5290] device (wlo1): Activation: successful, device activated.
dub 24 09:00:04 fedora systemd-resolved[1572]: wlo1: Bus client set default route setting: yes
dub 24 09:00:04 fedora systemd-resolved[1572]: wlo1: Bus client set DNS server list to: 192.168.0.1
dub 24 09:00:04 fedora nm-dispatcher[192096]: req:9 'up' [wlo1]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:04 fedora systemd[1]: iscsi.service: Unit cannot be reloaded because it is inactive.
dub 24 09:00:04 fedora chronyd[1661]: Source 49.12.125.53 online
dub 24 09:00:04 fedora nm-dispatcher[192096]: req:10 'connectivity-change': find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:04 fedora NetworkManager[192188]: <info>  [1650783604.6128] manager: NetworkManager state is now CONNECTED_GLOBAL
dub 24 09:00:04 fedora nm-dispatcher[192096]: req:11 'connectivity-change': find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:06 fedora NetworkManager[192188]: <info>  [1650783606.2953] dhcp6 (wlo1): activation: beginning transaction (timeout in 45 seconds)
dub 24 09:00:06 fedora NetworkManager[192188]: <info>  [1650783606.2965] policy: set 'Vodafone-AF8C' (wlo1) as default for IPv6 routing and DNS
dub 24 09:00:06 fedora avahi-daemon[1602]: Leaving mDNS multicast group on interface wlo1.IPv6 with address fe80::3665:72d3:5d40:5a7c.
dub 24 09:00:06 fedora avahi-daemon[1602]: Joining mDNS multicast group on interface wlo1.IPv6 with address 2a02:810b:c63f:b7f0:f1bb:4f69:1c75:5853.
dub 24 09:00:06 fedora avahi-daemon[1602]: Registering new address record for 2a02:810b:c63f:b7f0:f1bb:4f69:1c75:5853 on wlo1.*.
dub 24 09:00:06 fedora avahi-daemon[1602]: Withdrawing address record for fe80::3665:72d3:5d40:5a7c on wlo1.
dub 24 09:00:06 fedora systemd-resolved[1572]: wlo1: Bus client set DNS server list to: 192.168.0.1, 2a02:810b:c63f:b7f0:10:18ff:fe57:af8c
dub 24 09:00:06 fedora NetworkManager[192188]: <info>  [1650783606.3150] dhcp6 (wlo1): state changed new lease, address=2a02:810b:c63f:b7f0::be66
dub 24 09:00:06 fedora avahi-daemon[1602]: Registering new address record for 2a02:810b:c63f:b7f0::be66 on wlo1.*.
dub 24 09:00:06 fedora nm-dispatcher[192096]: req:12 'dhcp6-change' [wlo1]: find-scripts: Failed to open dispatcher directory '/etc/NetworkManager/dispatcher.d': Error opening directory “/etc/NetworkManager/dispatcher.d”: Permission denied
dub 24 09:00:06 fedora chronyd[1661]: Source 2001:638:502:c015::231 online
dub 24 09:00:06 fedora chronyd[1661]: Source 2a03:4000:13:34f::2 online
dub 24 09:00:06 fedora chronyd[1661]: Source 2a03:4000:4e:9ed:34db:7bff:feea:4253 online
dub 24 09:00:07 fedora audit: BPF prog-id=226 op=LOAD
dub 24 09:00:07 fedora systemd[1]: Starting fprintd.service - Fingerprint Authentication Daemon...
dub 24 09:00:07 fedora systemd[1]: Started fprintd.service - Fingerprint Authentication Daemon.
dub 24 09:00:07 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fprintd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
dub 24 09:00:08 fedora NetworkManager[192188]: <info>  [1650783608.2436] manager: startup complete
dub 24 09:00:08 fedora systemd[1]: Finished NetworkManager-wait-online.service - Network Manager Wait Online.
dub 24 09:00:08 fedora audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=NetworkManager-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

Obvykle proste pro overeni ze to je selinuxem (a v logu ani nemusi byt zadne hlasky, uz jsem to taky videl) je proste selinux na chvili vypnout. Jinak obecne proste ne vzdy fedorou dodana pravidla pro selinux postihuji vsechny situace. Od toho je pak audit2allow utilita, ktera ti do selinuxu pridat pravidla na zaklade chybovych hlasek.

1 Like