Running strict/enforcing, latest rawhide
(selinux-policy-strict-1.19.10-1)
Booting produces following avc:
Dec 3 08:23:45 fedora kernel: audit(1102090997.316:0): avc: denied
{ create } for pid=1348 exe=/sbin/nash name=md0
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:device_t tclass=blk_file Dec 3 08:23:45
fedora kernel: device-mapper: 4.1.0-ioctl (2003-12-10) initialised:
dm@xxxxxxxxxxxxxx
Dec 3 08:23:45 fedora kernel: audit(1102090997.383:0): avc: denied
{ create } for pid=1354 exe=/sbin/nash name=mapper
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:device_t tclass=dir
Does initrc get create perms for this?
tom
--
Tom London
