-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 13 November 2007, you wrote: > On Tue, 2007-11-13 at 10:27 -0600, Steven Harp wrote: > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > > > The pcscd policy (daemon for smart card readers) handles USB > > readers fine, but balks--for me--when a serial port reader is > > configured (the daemon quietly dies). > > > > Module rev 1.1.0 includes a line: > > term_dontaudit_use_unallocated_ttys(pcscd_t) > > > > Should this perhaps be: > > term_use_unallocated_ttys(pcscd_t) > > ? > > Sounds like it. Did the serial reader start working when you allowed > the access? > > -- > Chris PeBenito Yes: this permission seems to satisfy it. An alternative here might be to assign a special label to the designated serial port, (e.g. ttyS1) that would dedicate it to pcscd--we don't move these old readers around too often. Not sure what else that might break, or whether the policy author had such a label in mind... # Steve Harp <steven.harp@xxxxxxxxxxxxxxxxx> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) iD8DBQFHOf1HPcFX9H2zuSkRApD/AJ0dDHBFZvsDWeJQhKRbv3u42rVuQgCcDr+Y IIPIbsHbok4/g3Da4GFE0bw= =VdnM -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
