kudzu needs to init_telinit to change its runlevel

kudzu needs to init_telinit to change its runlevel

[Daniel J Walsh]

[-- Attachment #1: Type: text/plain, Size: 1 bytes --]



[-- Attachment #2: nsaserefpolicy_policy_modules_admin_kudzu.patch --]
[-- Type: text/x-patch, Size: 365 bytes --]

--- nsaserefpolicy/policy/modules/admin/kudzu.te	2007-01-02 12:57:51.000000000 -0500
+++ serefpolicy-2.5.8/policy/modules/admin/kudzu.te	2007-03-08 08:42:36.000000000 -0500
@@ -103,6 +103,7 @@
 init_use_fds(kudzu_t)
 init_use_script_ptys(kudzu_t)
 init_stream_connect_script(kudzu_t)
+init_telinit(kudzu_t)
 
 libs_use_ld_so(kudzu_t)
 libs_use_shared_libs(kudzu_t)

Re: kudzu needs to init_telinit to change its runlevel

[Christopher J. PeBenito]

On Thu, 2007-03-08 at 10:22 -0500, Daniel J Walsh wrote:
> --- nsaserefpolicy/policy/modules/admin/kudzu.te        2007-01-02 12:57:51.000000000 -0500
> +++ serefpolicy-2.5.8/policy/modules/admin/kudzu.te     2007-03-08 08:42:36.000000000 -0500
> @@ -103,6 +103,7 @@
>  init_use_fds(kudzu_t)
>  init_use_script_ptys(kudzu_t)
>  init_stream_connect_script(kudzu_t)
> +init_telinit(kudzu_t)
>  
>  libs_use_ld_so(kudzu_t)
>  libs_use_shared_libs(kudzu_t)

This seems odd to me.  Why would kudzu need to change the runlevel?  I
thought it just detected and configured hardware.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: kudzu needs to init_telinit to change its runlevel

[Linda Knippers]

Christopher J. PeBenito wrote:
> On Thu, 2007-03-08 at 10:22 -0500, Daniel J Walsh wrote:
> 
>>--- nsaserefpolicy/policy/modules/admin/kudzu.te        2007-01-02 12:57:51.000000000 -0500
>>+++ serefpolicy-2.5.8/policy/modules/admin/kudzu.te     2007-03-08 08:42:36.000000000 -0500
>>@@ -103,6 +103,7 @@
>> init_use_fds(kudzu_t)
>> init_use_script_ptys(kudzu_t)
>> init_stream_connect_script(kudzu_t)
>>+init_telinit(kudzu_t)
>> 
>> libs_use_ld_so(kudzu_t)
>> libs_use_shared_libs(kudzu_t)
> 
> 
> This seems odd to me.  Why would kudzu need to change the runlevel?  I
> thought it just detected and configured hardware.

If it detects a serial console, and I assume tty devices in general, it
updates /etc/inittab and then wants to signal init via telinit to cause
init to re-read the inittab.  Its not changing run level, just causing
inittab to be re-read.

Without this change we didn't get login prompts on serial consoles on
the first boot a system.

-- ljk


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: kudzu needs to init_telinit to change its runlevel

[Christopher J. PeBenito]

On Mon, 2007-03-19 at 14:50 -0400, Linda Knippers wrote:
> Christopher J. PeBenito wrote:
> > On Thu, 2007-03-08 at 10:22 -0500, Daniel J Walsh wrote:
> > 
> >>--- nsaserefpolicy/policy/modules/admin/kudzu.te        2007-01-02 12:57:51.000000000 -0500
> >>+++ serefpolicy-2.5.8/policy/modules/admin/kudzu.te     2007-03-08 08:42:36.000000000 -0500
> >>@@ -103,6 +103,7 @@
> >> init_use_fds(kudzu_t)
> >> init_use_script_ptys(kudzu_t)
> >> init_stream_connect_script(kudzu_t)
> >>+init_telinit(kudzu_t)
> >> 
> >> libs_use_ld_so(kudzu_t)
> >> libs_use_shared_libs(kudzu_t)
> > 
> > 
> > This seems odd to me.  Why would kudzu need to change the runlevel?  I
> > thought it just detected and configured hardware.
> 
> If it detects a serial console, and I assume tty devices in general, it
> updates /etc/inittab and then wants to signal init via telinit to cause
> init to re-read the inittab.  Its not changing run level, just causing
> inittab to be re-read.
> 
> Without this change we didn't get login prompts on serial consoles on
> the first boot a system.

Thanks for the description.  Merged.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: kudzu needs to init_telinit to change its runlevel

[Daniel J Walsh]

Christopher J. PeBenito wrote:
> On Mon, 2007-03-19 at 14:50 -0400, Linda Knippers wrote:
>   
>> Christopher J. PeBenito wrote:
>>     
>>> On Thu, 2007-03-08 at 10:22 -0500, Daniel J Walsh wrote:
>>>
>>>       
>>>> --- nsaserefpolicy/policy/modules/admin/kudzu.te        2007-01-02 12:57:51.000000000 -0500
>>>> +++ serefpolicy-2.5.8/policy/modules/admin/kudzu.te     2007-03-08 08:42:36.000000000 -0500
>>>> @@ -103,6 +103,7 @@
>>>> init_use_fds(kudzu_t)
>>>> init_use_script_ptys(kudzu_t)
>>>> init_stream_connect_script(kudzu_t)
>>>> +init_telinit(kudzu_t)
>>>>
>>>> libs_use_ld_so(kudzu_t)
>>>> libs_use_shared_libs(kudzu_t)
>>>>         
>>> This seems odd to me.  Why would kudzu need to change the runlevel?  I
>>> thought it just detected and configured hardware.
>>>       
>> If it detects a serial console, and I assume tty devices in general, it
>> updates /etc/inittab and then wants to signal init via telinit to cause
>> init to re-read the inittab.  Its not changing run level, just causing
>> inittab to be re-read.
>>
>> Without this change we didn't get login prompts on serial consoles on
>> the first boot a system.
>>     
>
> Thanks for the description.  Merged.
>
>   
Thanks Linda.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.