On 1/23/06, Daniel J Walsh <dwalsh@redhat.com> wrote:
Roger Grosswiler wrote:
> this is after todays update:
>
>
> allow hald_t automount_tmp_t:dir getattr;
> allow hald_t boot_t:dir getattr;
> allow hald_t home_root_t:dir search;
> allow hald_t initctl_t:fifo_file write;
> allow hald_t initrc_var_run_t:file lock;
> allow hald_t mnt_t:dir read;
> allow hald_t mnt_t:file write;
> allow hald_t sysctl_fs_t:dir search;
> allow hald_t usr_t:file execute;
> allow hald_t var_lib_nfs_t:dir search;
>
>
> ...and again if selinux==enforced then no g-p-m
>
> Rog
>
>
What version of policy are you running?

Latest version is supposed to allow hald to have full control over mnt.
The usr_t:file execute sounds like a mislabled file which should have
been fixed by the latest policy also.


--
fedora-test-list mailing list
fedora-test-list@redhat.com
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-test-list


rpm -qa *\policy\*
selinux-policy-targeted-2.2.2-1
selinux-policy-2.2.2-1
policycoreutils-1.29.9-2

Same problem.