Re: mingetty on SuSE

[Carsten Grohmann <carsten.grohmann@dr-baldeweg.de>]

I mean this is a SuSE specific problem. Today I rebuild the source rpm
"mingetty-1.00-1.src.rpm" from rpmfind.net and replay the suse file with
this package. It works fine. I do not get follow log entries:
"May 10 07:51:07 myserver mingetty[231]: cannot open(/proc/2/maps):
Permission denied"
I recommend all SuSE users to replace the mingetty programm.

Carsten

Stephen Smalley schrieb:
> 
> On Mon, 10 Jun 2002, Carsten Grohmann wrote:
> 
> > I use mingetty on my SuSE 7.1. Mingetty needs read access to many
> > different types in the proc directory to run correct.
> > Now me question: Is it possible to limit the access to the different
> > types only to the proc directory? I think no, but I hope anyone has an
> > solution. In the other case I can not get mingetty the permissions,
> > because it can read to much files. What getty programs do you use?
> 
> mingetty also runs on our machines, but I don't see this behavior.
> I assume that you mean that mingetty is probing the /proc/PID entries, and
> thus you are seeing audit messages for the various domains.  Unless
> mingetty truly needs access to other domains' /proc/PID files, I'd suggest
> using dontaudit (or auditdeny, if you haven't applied the dontaudit
> patch) rules to suppress the audit messages but continue denying access.
> See the xdm.te file or the user_macros.te file for examples.
> 
> --
> Stephen D. Smalley, NAI Labs
> ssmalley@nai.com

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.