Running strict/enforcing, latest Rawhide.
installing today's kernel reports:
Installing: kernel 100 % done 1/1
/bin/bash: /root/.bashrc: Permission denied
ln: creating symbolic link `/tmp/initrd.L17712/sbin' to `bin':
Permission deniedln: creating symbolic link
`/tmp/initrd.L17712/sbin/modprobe' to `/sbin/nash': No such file or
directory
cp: cannot create regular file `/tmp/initrd.L17712/sbin/udev': No such
file or directory
ln: creating symbolic link `/tmp/initrd.L17712/sbin/udevstart' to
`udev': No such file or directory
ln: creating symbolic link `/tmp/initrd.L17712/sbin/hotplug' to
`/sbin/nash': No such file or directory
with the following AVC;
Dec 17 08:25:06 fedora kernel: audit(1103300706.529:0): avc: denied
{ create } for pid=17723 exe=/bin/ln name=sbin
scontext=root:sysadm_r:bootloader_t
tcontext=root:object_r:bootloader_tmp_t tclass=lnk_file
This patch seems to fix it.....
tom
--- bootloader.te.old 2004-12-17 08:31:33.195853461 -0800
+++ bootloader.te 2004-12-17 08:27:51.453938491 -0800
@@ -29,7 +29,7 @@
allow bootloader_t { initrc_t privfd }:fd use;
tmp_domain(bootloader, `, device_type')
-allow bootloader_t bootloader_tmp_t:devfile_class_set create_file_perms;
+allow bootloader_t bootloader_tmp_t:{ devfile_class_set lnk_file }
create_file_perms;
read_locale(bootloader_t)
--
Tom London
