On Wed, 2004-06-16 at 10:08, Ismail Iyigunler wrote: > Hi > > But there are some directories and files shown as "(null)". like /lost+found > or /sys. Is this normal? For /sys, yes. /lost+found should have a visible context, assuming it is on a filesystem that supports them (e.g. ext3). See http://www.redhat.com/archives/fedora-selinux-list/2004-June/msg00004.html > There's no AVC messages shown for it, also in /var/log/messages, and this > happens both in enforcing and permissive mode. The kernel internally has a context for the inode, but it isn't exported to userspace due to the lack of an xattr handler. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency
