From: Luke Kenneth Casson Leighton <lkcl@lkcl.net>
To: Russell Coker <russell@coker.com.au>
Cc: fedora-selinux-list@redhat.com, SE-Linux <selinux@tycho.nsa.gov>,
Tom London <selinux@comcast.net>
Subject: Re: Progress! .532 boots! -- but dbus/hotplug/udev problems remain?
Date: Sun, 29 Aug 2004 11:06:42 +0100 [thread overview]
Message-ID: <20040829100641.GG7610@lkcl.net> (raw)
In-Reply-To: <200408291737.17497.russell@coker.com.au>
btw i didn't see an acknowledgement from the person who sent the
last udev patch (dan was it you?)
the use of the "mode" argument it is clear has not been used,
to call i think it was matchpathcon.
instead, because i had three near-identical code portions all
of which had different S_IFXXX thingies, dan-i-think-it-was
moved the near-identical code into a function with a "mode"
argument...
... and forgot to use the "mode" argument such that matchpathcon
is called with S_IFDIR.
given that i haven't seen an acknowledgement of this issue
either in my inbox or on the mailing lists (which i am checking
manually) i thought it best to hassle people until i know it's
been spotted.
this is IMPORTANT because it will impact the contexts on
inodes and stuff created in /dev: the "optimising" argument
"mode" passed to matchpathcon and setfscreatecon, if wrong,
results in relevant (and correct!) file_context entries being
skipped!
l.
On Sun, Aug 29, 2004 at 05:37:17PM +1000, Russell Coker wrote:
> On Sun, 29 Aug 2004 04:29, Tom London <selinux@comcast.net> wrote:
> > Newest Rawhide updates (including udev-030-10, mkinitrd-4.1.8-1,
> > kernel-2.6.8-1.532, and selinux-policy-strict-1.17.5-2)
> > now boots in strict/enforcing.
>
> I've attached a diff against the CVS policy as well as the .te and .fc files
> for udev changes which fix this and address some other issues as well.
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2004-08-29 9:55 UTC|newest]
Thread overview: 12+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <4130CF1B.3090909@comcast.net>
2004-08-29 7:37 ` Progress! .532 boots! -- but dbus/hotplug/udev problems remain? Russell Coker
2004-08-29 10:06 ` Luke Kenneth Casson Leighton [this message]
2004-08-30 18:17 ` Daniel J Walsh
2004-08-29 19:32 ` Tom London
2004-08-29 20:59 ` Colin Walters
2004-09-01 6:37 ` Russell Coker
2004-09-01 11:33 ` Stephen Smalley
2004-09-01 11:52 ` Stephen Smalley
2004-08-29 19:53 ` Tom London
2004-08-30 18:20 ` Daniel J Walsh
2004-08-30 20:33 ` Luke Kenneth Casson Leighton
2004-08-30 20:42 ` James Carter
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040829100641.GG7610@lkcl.net \
--to=lkcl@lkcl.net \
--cc=fedora-selinux-list@redhat.com \
--cc=russell@coker.com.au \
--cc=selinux@comcast.net \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.