selinux

SELinux is preventing wicd from setattr access on the file /etc/wicd/manager-settings.conf.

*****  Plugin restorecon (94.8 confidence) suggests  *************************

If you want to fix the label.
/etc/wicd/manager-settings.conf default label should be NetworkManager_var_lib_t.
Then you can run restorecon.
Do
# /sbin/restorecon -v /etc/wicd/manager-settings.conf

*****  Plugin catchall_labels (5.21 confidence) suggests  ********************

If you want to allow wicd to have setattr access on the manager-settings.conf file
Then you need to change the label on /etc/wicd/manager-settings.conf
Do
# semanage fcontext -a -t FILE_TYPE '/etc/wicd/manager-settings.conf'
where FILE_TYPE is one of the following: net_conf_t, pppd_var_run_t, named_cache_t, NetworkManager_etc_rw_t, NetworkManager_tmp_t, NetworkManager_log_t, NetworkManager_var_lib_t, NetworkManager_var_run_t, root_t.
Then execute:
restorecon -v '/etc/wicd/manager-settings.conf'


*****  Plugin catchall (1.44 confidence) suggests  ***************************

If you believe that wicd should be allowed setattr access on the manager-settings.conf file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep wicd /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:NetworkManager_t:s0
Target Context                unconfined_u:object_r:etc_t:s0
Target Objects                /etc/wicd/manager-settings.conf [ file ]
Source                        wicd
Source Path                   wicd
Port                          <Unknown>
Host                          tekk.local
Source RPM Packages
Target RPM Packages
Policy RPM                    selinux-policy-3.10.0-84.fc16.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Permissive
Host Name                     tekk.local
Platform                      Linux tekk.local 3.3.4-3.fc16.i686.PAE #1 SMP Thu
                              May 3 14:54:14 UTC 2012 i686 i686
Alert Count                   1
First Seen                    Thu 10 May 2012 08:28:23 AM MSK
Last Seen                     Thu 10 May 2012 08:28:23 AM MSK
Local ID                      f95a2b06-e5f9-429e-be39-383bd6e8d841

Raw Audit Messages
type=AVC msg=audit(1336624103.876:31): avc:  denied  { setattr } for  pid=964 comm="wicd" name="manager-settings.conf" dev="dm-1" ino=918385 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=unconfined_u:object_r:etc_t:s0 tclass=file


Hash: wicd,NetworkManager_t,etc_t,file,setattr

audit2allow

#============= NetworkManager_t ==============
allow NetworkManager_t etc_t:file setattr;

audit2allow -R

#============= NetworkManager_t ==============
allow NetworkManager_t etc_t:file setattr;