From: Luke Kenneth Casson Leighton <lkcl@lkcl.net>
To: Marco d'Itri <md@Linux.IT>
Cc: 263079@bugs.debian.org, SE-Linux <selinux@tycho.nsa.gov>,
Linux Hotplug Dev List
<linux-hotplug-devel@lists.sourceforge.net>
Subject: Re: Bug#263079: udev: missing mknod on ppp
Date: Mon, 02 Aug 2004 23:15:34 +0000 [thread overview]
Message-ID: <20040802231534.GB16238@lkcl.net> (raw)
In-Reply-To: <20040802224118.GA18849@wonderland.linux.it>
On Tue, Aug 03, 2004 at 12:41:18AM +0200, Marco d'Itri wrote:
> On Aug 03, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
>
> > udev appears to be missing out ppp: i got a request
> > to mknod /dev/ppp c 108 0 when running pon provider
> I see no sign of this being an udev bug.
> Please upgrade your kernel and read again README.Debian.
> If you don't have /sys/class/ppp/ppp/dev, your kernel is too old.
>
> --
> ciao, |
> Marco | [7408 op/KllxVxdFKI]
Script started on Tue Aug 3 00:07:18 2004
highfield:~# more /etc/motd
Linux highfield 2.6.6-selinux1 #5 Tue May 18 16:33:29 GMT 2004 i686 GNU/Linux
highfield:~# ls /sys/class/ppp/ppp/dev
/sys/class/ppp/ppp/dev
highfield:~#
Script done on Tue Aug 3 00:07:30 2004
so this might be a kernel bug then?
thank you for pointing me at the README.Debian because it makes clear
that for SE/Linux there are certain /dev entries that may not get
fired up by udev, and consequently won't have se/linux permissions set!
i've had to modify /etc/init.d/udev to do a manual /sbin/restorecon on
all entries listed in /etc/udev/links.conf.
i have some vague and rushed recollection of forcibly doing an
/sbin/restorecon in /etc/init.d/modutils, too.
does anyone have any suggestions on how /etc/modutils should be dealt
with on a tmpfs-mounted /dev?
bearing in mind that a [patched, see
http://hands.com/~lkcl/selinux/2.6.6 tmfs-xattr patch] selinux tmpfs
would be mounted with NO initial selinux permissions, and that
ANYTHING that goes into it will need to have a security context set
on it for there to be any chance of it being accessible.
the issue is, therefore that /etc/init.d/modutils will endeavour to
manually install modules at startup - even before udev is run - and
it doesn't bother to set the selinux permissions.
and also, as this initial bug might be raising, if udev doesn't
notice a device driver, /sbin/restorecon (or equivalent) won't ever
get called.
ideas, anyone?
l.
-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net
Linux-hotplug-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel
next parent reply other threads:[~2004-08-02 23:15 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <E1Brl5k-0006Jd-1F@lkcl.net>
[not found] ` <20040802224118.GA18849@wonderland.linux.it>
2004-08-02 23:15 ` Luke Kenneth Casson Leighton [this message]
2004-08-02 23:11 ` Bug#263079: udev: missing mknod on ppp Marco d'Itri
2004-08-03 1:52 ` Alexander E. Patrakov
2004-08-03 8:35 ` Luke Kenneth Casson Leighton
2004-08-03 8:27 ` Luke Kenneth Casson Leighton
2004-08-03 10:03 ` Marco d'Itri
2004-08-03 10:04 ` Marco d'Itri
2004-08-03 13:01 ` Alexander E. Patrakov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040802231534.GB16238@lkcl.net \
--to=lkcl@lkcl.net \
--cc=263079@bugs.debian.org \
--cc=linux-hotplug-devel@lists.sourceforge.net \
--cc=md@Linux.IT \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).