Re: selinux denials on rawhide. Some I can't get back

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 08/20/2009 08:27 AM, Antonio Olivares wrote:
> Dear fellow selinux experts,
> 
> I have encountered some weird denials while running rawhide.  But selinux troubleshooter is not allowing me to file bugs.  IT just hangs.  While running livecd I was able to file some bugs.  After installing(restoring a rawhide system using livecd), I can't do it.  I will attach a set of denials by selinux.
> 
> Thanks,
> 
> Antonio
> 
> 
>       
> 
> 
> ------------------------------------------------------------------------
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
All of the vbetool bugs are fixed in the latest rawhide udev transitions to vbetool_t

THe ones that are not vbetool related

#============= auditctl_t ==============
allow auditctl_t device_t:file write;

Dan> This is a bug in the initrd I believe,  it seems to be creating a file named /dev/null,   Or it is failing to create a file and the first process that redirects its output creates the file with the wrong label.

#============= initrc_t ==============
allow initrc_t etc_t:lnk_file { create unlink };

Fixed in selinux-policy-3.6.28-3.fc12

#============= udev_t ==============
allow udev_t self:capability sys_module;

This is a kernel fix that eparis is working on.  I believe it is bubbling through the kernel acceptance stream. 

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux