On 08/20/2009 08:27 AM, Antonio Olivares wrote:
Dear fellow selinux experts,
I have encountered some weird denials while running rawhide. But selinux troubleshooter is not allowing me to file bugs. IT just hangs. While running livecd I was able to file some bugs. After installing(restoring a rawhide system using livecd), I can't do it. I will attach a set of denials by selinux.
Thanks,
Antonio
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
All of the vbetool bugs are fixed in the latest rawhide udev transitions to vbetool_t
THe ones that are not vbetool related
#============= auditctl_t ============== allow auditctl_t device_t:file write;
Dan> This is a bug in the initrd I believe, it seems to be creating a file named /dev/null, Or it is failing to create a file and the first process that redirects its output creates the file with the wrong label.
#============= initrc_t ============== allow initrc_t etc_t:lnk_file { create unlink };
Fixed in selinux-policy-3.6.28-3.fc12
#============= udev_t ============== allow udev_t self:capability sys_module;
This is a kernel fix that eparis is working on. I believe it is bubbling through the kernel acceptance stream.