Am Montag, den 23.01.2006, 09:46 -0500 schrieb Daniel J Walsh:
Roger Grosswiler wrote:
> this is after todays update:
>
>
> allow hald_t automount_tmp_t:dir getattr;
> allow hald_t boot_t:dir getattr;
> allow hald_t home_root_t:dir search;
> allow hald_t initctl_t:fifo_file write;
> allow hald_t initrc_var_run_t:file lock;
> allow hald_t mnt_t:dir read;
> allow hald_t mnt_t:file write;
> allow hald_t sysctl_fs_t:dir search;
> allow hald_t usr_t:file execute;
> allow hald_t var_lib_nfs_t:dir search;
>
>
> ...and again if selinux==enforced then no g-p-m
>
> Rog
>
>
What version of policy are you running?
Latest version is supposed to allow hald to have full control over mnt.
The usr_t:file execute sounds like a mislabled file which should have
been fixed by the latest policy also.
i did a manual fixfiles relabel after the latest policy. Here my
information:
policycoreutils-1.29.9-2
checkpolicy-1.28-5
libselinux-1.29.6-1
Roger