strange failure

[Russell Coker <russell@coker.com.au>]

I have the following in my policy:
allow devfsd_t domain:dir_file_class_set getattr;

But I get the following logged:
Mar 22 22:26:22 test kernel: avc:  denied  { getattr } for  pid=394 
exe=/sbin/devfsd path=/vc/2 dev=00:07 ino=20 
scontext=system_u:system_r:devfsd_t 
tcontext=root:object_r:sysadm_tty_device_t tclass=chr_file

What am I missing?

I've tried this many times, read the macro expansion, reloaded the config and 
restarted the daemon etc.  I'm pretty sure that I haven't made the obvious 
mistakes of not saving the file or not loading the policy etc.

-- 
If you send email to me or to a mailing list that I use which has >4 lines
of legalistic junk at the end then you are specifically authorizing me to do
whatever I wish with the message and all other messages from your domain, by
posting the message you agree that your long legalistic sig is void.

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.