Re: kernel-2.6.7-1.439: 'new' AVCs at boot time

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 30 Jun 2004 01:28, Stephen Smalley <sds@xxxxxxxxxxxxxx> wrote:
> It should be harmless, as any attempt by udev to access proc before it
> is mounted is going to fail anyway, so this just changes the error
> condition (ENOENT -> EACCES).

We will have to add a dontaudit rule for it as we do for a number of other 
domains that may access mount points before the file system is mounted.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux