* [refpolicy] One more fix for mount_t: able to request loading kernel module
@ 2010-12-21 3:53 HarryCiao
2011-01-10 15:28 ` Christopher J. PeBenito
0 siblings, 1 reply; 2+ messages in thread
From: HarryCiao @ 2010-12-21 3:53 UTC (permalink / raw)
To: refpolicy
Make the mount domain able to request kernel to load a kernel module.
Otherwise the binfmt_misc kernel module won't be properly loaded
during system booting up.
type=1400 audit(1292850971.104:4): avc: denied { module_request } for pid=87 comm="mount" kmod="devtmpfs" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
type=1400 audit(1292851024.844:13): avc: denied { module_request } for pid=409 comm="mount" kmod="binfmt_misc" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-mount_t-request-kernel-module.patch
Type: application/octet-stream
Size: 1542 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.obj
^ permalink raw reply [flat|nested] 2+ messages in thread* [refpolicy] One more fix for mount_t: able to request loading kernel module
2010-12-21 3:53 [refpolicy] One more fix for mount_t: able to request loading kernel module HarryCiao
@ 2011-01-10 15:28 ` Christopher J. PeBenito
0 siblings, 0 replies; 2+ messages in thread
From: Christopher J. PeBenito @ 2011-01-10 15:28 UTC (permalink / raw)
To: refpolicy
On 12/20/10 22:53, HarryCiao wrote:
> Make the mount domain able to request kernel to load a kernel module.
> Otherwise the binfmt_misc kernel module won't be properly loaded
> during system booting up.
Merged.
> type=1400 audit(1292850971.104:4): avc: denied { module_request } for
> pid=87 comm="mount" kmod="devtmpfs"
> scontext=system_u:system_r:mount_t:s0-s15:c0.c1023
> tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
>
> type=1400 audit(1292851024.844:13): avc: denied { module_request } for
> pid=409 comm="mount" kmod="binfmt_misc"
> scontext=system_u:system_r:mount_t:s0-s15:c0.c1023
> tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
--
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2011-01-10 15:28 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-12-21 3:53 [refpolicy] One more fix for mount_t: able to request loading kernel module HarryCiao
2011-01-10 15:28 ` Christopher J. PeBenito
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.