On Mon, 2007-11-26 at 15:45 +0100, Václav Ovsík wrote:
> Hi,
> Debian Etch, refpolicy HEAD, udev produces during startup (udevsettle)
> wile creating symlinks into /dev/disk/by-uuid/...
> following:
>
> audit(1195744042.060:3): avc: denied { relabelfrom } for pid=836 comm="udevd" name="44517f56-2445-4330-bce7-5168aa534c1c" dev=tmpfs ino=1646 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=lnk_file
> audit(1195744042.060:4): avc: denied { relabelto } for pid=836 comm="udevd" name="44517f56-2445-4330-bce7-5168aa534c1c" dev=tmpfs ino=1646 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=lnk_file
>
> Attached patch solves this.
> Can be merged into refpolicy please?
This is interesting, it isn't seen on other distros. Perhaps it has to
do with the way debian sets up tmpfs /dev before udev starts?
--
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
