From mboxrd@z Thu Jan 1 00:00:00 1970 From: Luke Kenneth Casson Leighton Date: Sun, 01 Aug 2004 15:50:34 +0000 Subject: hotplug 0.030 not setting selinux permissions on /dev/tty* Message-Id: <20040801160019.GC15949@lkcl.net> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-hotplug-devel@lists.sourceforge.net, SE-Linux hi there, i've got udev up-and-running, with an selinux kernel 2.6.7. i've added se-linux temporary attributes to tmpfs in order for the tmpfs /dev to "remember" the selinux settings that udev would make (without the patch, it's guaranteed to fail). [see http://hands.com/~lkcl/selinux/2.6.6] the issue is that i am not seeing any execution of /etc/dev.d/default/selinux.dev on /dev/tty[absolutelyanything]. so as a temporary hack i am going to have to do a manual restorecon or a setfiles /etc/selinux/src/file_contexts/file_contexts /dev. which defeats the object of having the /etc/dev.d/default/selinux.dev stuff in the first place. i really don't know enough about the operation of udev to say where the creation of /dev/tty1, /dev/tty2 etc etc etc are coming from, or why /etc/dev.d/default/selinux.dev would not be called. does anyone know why? what is going on: /dev/tty1...N are all in /dev/.udev.tdb, and they are all created in /dev, so... why wouldn't they have the permissions set? could it be because.... they are copied from somewhere else? e.g. the initrd scripts? i am at a loss. l. -- -- Information I post is with honesty, integrity, and the expectation that you will take full responsibility if acting on the information contained, and that, should you find it to be flawed or even mildly useful, you will act with both honesty and integrity in return - and tell me. -- lkcl.net
lkcl@lkcl.net
------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com _______________________________________________ Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net Linux-hotplug-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel