[prev in list] [next in list] [prev in thread] [next in thread] 

List:       fedora-selinux-list
Subject:    Re: problems with /dev/slamr0, mknod/insmod
From:       Daniel J Walsh <dwalsh () redhat ! com>
Date:       2007-11-19 20:32:53
Message-ID: 4741F2F5.7070905 () redhat ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Antonio Olivares wrote:
> Dear all,
> 
> On  a fedora 8 machine with clean install, deleted Fedora 6 and started fresh, I \
> get a warning about insmod as I did with Fedora 7, on Fedora 7 the problem went \
> away, but on Fedora 8, setroubleshoot will warm me more than it did before so I \
> kindly ask for guidance as to how to generate policy to allow the /dev/slamr0 to \
> run without problems with selinux. 
> avc: denied { setattr } for comm=chgrp dev=tmpfs egid=0 euid=0 exe=/bin/chgrp
> exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name=slamr0 pid=1890
> scontext=system_u:system_r:insmod_t:s0 sgid=0 subj=system_u:system_r:insmod_t:s0
> suid=0 tclass=chr_file tcontext=system_u:object_r:device_t:s0 tty=(none) uid=0
> 
> 
> I'll attach the selinux-alert that I got and ask for guidance to resolve this \
> issue.  
> TIA,
> 
> Antonio 
> 
> 
> 
> 
> ____________________________________________________________________________________
>  Get easy, one-click access to your favorites. 
> Make Yahoo! your homepage.
> http://www.yahoo.com/r/hs 
> 
> 
> ------------------------------------------------------------------------
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
The problem is this is non labeled.  Adding


/dev/slamr[0-9]+        -c      system_u:object_r:tty_device_t:s0

to selinux-policy-3.0.8-56
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iD8DBQFHQfL1rlYvE4MpobMRAg0ZAJ9+gpcBOm3En+gVrAM+cTuuZJMbFACg3nGD
S/SrOMkjaXdWhNTzktWYoZQ=
=vDym
-----END PGP SIGNATURE-----

--
fedora-selinux-list mailing list
fedora-selinux-list@redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list


[prev in list] [next in list] [prev in thread] [next in thread]