From: Luke Kenneth Casson Leighton <lkcl@lkcl.net>
To: "Alexander E. Patrakov" <patrakov@ums.usu.ru>
Cc: Marco d'Itri <md@Linux.IT>,
263079@bugs.debian.org,
linux-hotplug-devel@lists.sourceforge.net,
SE-Linux <selinux@tycho.nsa.gov>
Subject: Re: Bug#263079: udev: missing mknod on ppp
Date: Tue, 03 Aug 2004 08:35:48 +0000 [thread overview]
Message-ID: <20040803083548.GB3504@lkcl.net> (raw)
In-Reply-To: <410EEFD9.2020902@ums.usu.ru>
On Tue, Aug 03, 2004 at 07:52:25AM +0600, Alexander E. Patrakov wrote:
> Marco d'Itri wrote:
>
> > On Aug 03, Luke Kenneth Casson Leighton <lkcl@lkcl.net> wrote:
> >
> >> thank you for pointing me at the README.Debian because it makes
> >> clear that for SE/Linux there are certain /dev entries that may not
> >> get fired up by udev, and consequently won't have se/linux
> >> permissions set!
> >
> > On debian, *all* devices are supposed to be created by udev if udev
> > is installed (because /dev is a tmpfs). I don't know why /dev/ppp is
> > not being created on your system.
> >
> Bedause the ppp-generic module is not autoloaded (put it into
> /etc/modules or see below).
>
> The same problem exists for all "non-hardware" modules. It can be solved
> by explicitly loading all these non-hardware modules at system startup.
> The following bootscriptlet loads all modules that potentially create
> devices and don't need hardware (i.e. exactly those drivers that are
> autoloaded on demand due to "char-major" aliases without udev):
>
> KVERSION=`uname -r`
> for module in `egrep '^alias (char|block)-major' \
> /lib/modules/$KVERSION/modules.alias /etc/modprobe.conf | \
> grep -v 1394 | awk '{print $3;}'`
> do
> modprobe $module
> done
>
okay.
in addition to calling modprobe, it is necessary to set selinux
permissions.
now, modprobe has a pretty name, but the command to call up the module
contains no information about what node is going to be created in /dev.
therefore, we have a problem.
without the name of the inode, the only way to set the selinux file
permissions is to either guess or to just... endeavour to set the
whole lot with this:
setfiles /etc/selinux/.../file_contexts/file_contexts /dev
this is totally yuk, but is a last resort measure.
anyone got any better ideas?
does anyone know whether doing the modprobe above will result in a
hotplug event from the "non-hardware" devices, such that udev will
be triggered, and a restorecon or createcon performed correctly?
marco kindly mentioned to me that some devices haven't been hooked into
the pci-hotplug stuff yet.
l.
-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net
Linux-hotplug-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel
next prev parent reply other threads:[~2004-08-03 8:35 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <E1Brl5k-0006Jd-1F@lkcl.net>
[not found] ` <20040802224118.GA18849@wonderland.linux.it>
2004-08-02 23:15 ` Bug#263079: udev: missing mknod on ppp Luke Kenneth Casson Leighton
2004-08-02 23:11 ` Marco d'Itri
2004-08-03 1:52 ` Alexander E. Patrakov
2004-08-03 8:35 ` Luke Kenneth Casson Leighton [this message]
2004-08-03 8:27 ` Luke Kenneth Casson Leighton
2004-08-03 10:03 ` Marco d'Itri
2004-08-03 10:04 ` Marco d'Itri
2004-08-03 13:01 ` Alexander E. Patrakov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040803083548.GB3504@lkcl.net \
--to=lkcl@lkcl.net \
--cc=263079@bugs.debian.org \
--cc=linux-hotplug-devel@lists.sourceforge.net \
--cc=md@Linux.IT \
--cc=patrakov@ums.usu.ru \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).