Re: Latest updates

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On Mon, 2006-09-11 at 11:49 +0200, Erich Schubert wrote:
> Hello Christopher,
> > > >> Lots of domains need term_dontaudit_use_unallocated_ttys for startup 
> > > >> from a tty.
> > > > Can you clarify this?  I don't know what you mean by "startup from a
> > > > tty".
> > Ok, so this is a direct_run_init+targeted issue.  Now it makes sense to
> > put it back into init_daemon_domain().  I'll take care of that.
> 
> I see that a lot on strict policy, too. Strict needs some love.
> 
> denied  { read write } for  pid=10820 comm="logcheck" name="tty"
> dev=tmpfs
> ino=3269 scontext=system_u:system_r:logrotate_t
> tcontext=system_u:object_r:tty_device_t tclass=chr_file

Since the device node is "tty", I assume it refers to /dev/tty, in which
case it is mislabeled.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.