Re: temporary hack to use udev in selinux

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Thu, Jul 29, 2004 at 08:36:41AM -0400, Stephen Smalley wrote:
> On Wed, 2004-07-28 at 19:20, Luke Kenneth Casson Leighton wrote:
> > fighting with it for a day, and after seeing some clues in the
> > file contexts (/(u)dev/....) i decided to try editing
> > /etc/udev/udev.conf to set it to use /udev instead of /dev.
> 
> I don't know which policy version you are using, but in the current
> policy, the regexes are of the form "/u?dev", so it works with either a
> /dev or /udev.  Requires using a xattr-supporting filesystem for udev,
> naturally.
 
 as i mention in my previous post, /.dev is the location that the
 debian maintainer has chosen to re-mount the "old" /dev which will
 have been hidden by udev.

 consequently, because /.dev is not listed in file_contexts/types.fc,
 all permissions get destroyed to system_u:object_r:default_t.

 on next boot, /sbin/init is denied access to /dev/hda2, my root
 partition!!!

 adding in /.?u?dev into the regex fixes the problem [ItWorksForMe(tm)]

 hey, maybe it should be /\.u?dev/.
 
 i didn't say i was any _good_ at writing regexes.
 
 [25 years of doing computer programming and i still avoid
 them as much as i can.]

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.