linux-hotplug.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
* UDEV.
@ 2010-08-18  9:51 Тима
  2010-08-18 12:49 ` UDEV Greg KH
                   ` (2 more replies)
  0 siblings, 3 replies; 20+ messages in thread
From: Тима @ 2010-08-18  9:51 UTC (permalink / raw)
  To: linux-hotplug

Hello All!
My name is Tima, I'm embedded software developer.
I'm working on driver for Satellite Digital Video Receiver.

May I ask some question about UDEV?

^ permalink raw reply	[flat|nested] 20+ messages in thread
* Re: udev
@ 2005-08-11 18:28 Greg KH
  2005-08-11 18:29 ` udev Mike
                   ` (11 more replies)
  0 siblings, 12 replies; 20+ messages in thread
From: Greg KH @ 2005-08-11 18:28 UTC (permalink / raw)
  To: linux-hotplug

On Thu, Aug 11, 2005 at 02:29:35PM -0400, Mike wrote:
> hey;
> 
> I've setup Raid1 on two SATA drives on my FC3 system. as well there are 
> several other SATA drives in the system that are not in the raid. I 
> wanted to make static mappings to the /dev devices. I've created a rules 
> file and according to the logs its reading the rules files I created.
> 
> ...
> Aug 09 21:34:42 localhost udev[10536]: configured rule in 
> '/etc/udev/rules.d/10-udev.rules' at line 4 applied, 'sdd' becomes '%k'
> Aug 09 21:34:42 localhost udev[10536]: creating device node '/dev/sdd'
> ...
> 
> but if I remove on of the drives from the system. It will read the rules 
> file only up to where the non present drive is then switch to the 
> defaults which removes the satic maps and breaks the raid.

What does running udevtest show for that situation?

thanks,

greg k-h


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
Linux-hotplug-devel mailing list  http://linux-hotplug.sourceforge.net
Linux-hotplug-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel

^ permalink raw reply	[flat|nested] 20+ messages in thread
* udev
@ 2004-08-08 22:47 Luke Kenneth Casson Leighton
  2004-08-09 12:36 ` udev Luke Kenneth Casson Leighton
  2004-08-09 12:40 ` udev Marco d'Itri
  0 siblings, 2 replies; 20+ messages in thread
From: Luke Kenneth Casson Leighton @ 2004-08-08 22:47 UTC (permalink / raw)
  To: SE-Linux, Linux Hotplug Dev List

[-- Attachment #1: Type: text/plain, Size: 1951 bytes --]

okay, combination of patches and mods.

1) xattr one which is  up on http://hands.com/~lkcl/selinux/2.6.6

2) remove stuff which tells mount 'fscontext=' option to bog off
   if it supports xattrs.

   don't know if this patch is needed, don't care either. 
   ItWorksForMe(tm) hey for all i know i missed out an option
   which makes it unnecessary to stop fscontext=....device_t
   from working.

3) make mount take option fscontext=....device_t   .... /dev

4) patch /etc/init.d/udev _and_ /etc/init.d/modutils to call a
   little program /sbin/restoredevicefiles.

   the horrible hack to make extra nodes in /dev needs to have
   a restorecon done on each node so created: quickest way is
   to do them all at once.

5) restoredevicefiles greps everything in /dev hey i just noticed
   it only does /dev/* not /dev/*/* oh well.

   i also had to copy /usr/bin/cut to /bin/cut hey there's probably
   a way to do it with sed or something.
 

okayyy...

so, one this isn't going to deal with is drivers that don't do
/sys yet: those nodes aren't going to be generating hotplug events
and so consequently their contexts will be wrong.

e.g. /dev/nvidiactl with nvidia's 2.6 driver: i got away with this
one by putting it in /etc/modutils, hence /sbin/restoredevicefiles
catches it.

e.g. /dev/ppp does something weird:
pon a.usb.converter.with.serial.modem.on.it requests that i manually
do a mknod /dev/ppp, even though this is a 2.6.7 driver!

apparently this is a possible race condition unrelated to selinux.


i think that's it.

l.


-- 
-- 
Information I post is with honesty, integrity, and the expectation that
you will take full responsibility if acting on the information contained,
and that, should you find it to be flawed or even mildly useful, you
will act with both honesty and integrity in return - and tell me.
--
<a href="http://lkcl.net">      lkcl.net      </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />


[-- Attachment #2: g --]
[-- Type: text/plain, Size: 1095 bytes --]

--- /etc/init.d/modutils.orig	2004-08-08 23:37:21.000000000 +0100
+++ /etc/init.d/modutils	2004-08-08 23:37:26.000000000 +0100
@@ -37,5 +37,10 @@
         modprobe -a -t boot \*
 fi
 
+# all devices created we must do the security contexts on them, oh dear.
+if [ -x /sbin/restoredevicefiles ]; then
+	/sbin/restoredevicefiles
+fi
+
 exit 0
 
--- /etc/init.d/udev.orig	2004-08-08 23:30:25.000000000 +0100
+++ /etc/init.d/udev	2004-08-08 23:39:22.000000000 +0100
@@ -57,7 +57,7 @@
   [ -d /.dev ] && mount --bind /dev /.dev
 
   echo -n "Mounting a tmpfs over /dev..."
-  mount -n -o size=$tmpfs_size,mode=0755 -t tmpfs none /dev
+  mount -n -o fscontext=system_u:object_r:device_t,size=$tmpfs_size,mode=0755 -t tmpfs none /dev
   echo "done."
 }
 
@@ -96,6 +96,11 @@
     echo -n "Creating initial device nodes..."
     $UDEVSTART
     make_extra_nodes
+    # all extra nodes created we must do the security contexts on them, oh dear.
+    if [ -x /sbin/restoredevicefiles ]; then
+      /sbin/restoredevicefiles
+    fi
+
     echo "done."
     ;;
   remove)
@@ -133,3 +138,4 @@
 
 exit 0
 
+ 

[-- Attachment #3: selinux-hooks.patch --]
[-- Type: text/plain, Size: 1110 bytes --]

Index: security/selinux/hooks.c
===================================================================
RCS file: /cvsroot/selinux/nsa/linux-2.6/security/selinux/hooks.c,v
retrieving revision 1.15
diff -u -u -r1.15 hooks.c
--- security/selinux/hooks.c	27 Jul 2004 17:43:11 -0000	1.15
+++ security/selinux/hooks.c	8 Aug 2004 21:39:46 -0000
@@ -385,6 +385,14 @@
 				break;
 
 			case Opt_fscontext:
+				/* lkcl: allow fscontext on file systems with xattr
+				 *       in order to be able to mount an xattr-enabled tmpfs
+				 *       on /dev with a different fscontext.
+				 *       reason: shmfs and tmpfs are mapped to two types
+				 *       but we need a third (e.g. udevfs_t) in order to
+				 *       not interfere with / have-to-add-to either tmp_t
+				 *       or shmfs_t
+				 *
 				if (sbsec->behavior != SECURITY_FS_USE_XATTR) {
 					rc = -EINVAL;
 					printk(KERN_WARNING "SELinux:  "
@@ -392,6 +400,7 @@
 					       " this filesystem type\n");
 					goto out_free;
 				}
+				*/
 				if (seen & (Opt_context|Opt_fscontext)) {
 					rc = -EINVAL;
 					printk(KERN_WARNING SEL_MOUNT_FAIL_MSG);

[-- Attachment #4: restoredevicefiles --]
[-- Type: text/plain, Size: 652 bytes --]

#!/bin/sh
#
# lkcl 2004aug08
#
# restore contexts on anything in /dev which has the default device_t
# file context.
#
# some things are meant to have device_t: hey, we set them too, makes
# no odds.
# 
# we pass all of the devs to restorecon on one line because restorecon
# caches the lookups of the filecontexts: doing a restorecon one at a
# time takes 1/4 sec per device/dir/symlink...

devs=''
#for x in `ls -altrZ /dev/ | grep -v initctl | grep device_t | grep -v "_device_t" | cut -c64-`; do
for x in `ls -altrZ /dev/ | grep device_t | grep -v "_device_t" | cut -c64-`; do
	echo $x
	devs="$devs /dev/$x"
done;
echo $devs
/sbin/restorecon $devs

^ permalink raw reply	[flat|nested] 20+ messages in thread
end of thread, other threads:[~2011-03-22 19:58 UTC | newest]

Thread overview: 20+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-08-18  9:51 UDEV Тима
2010-08-18 12:49 ` UDEV Greg KH
2010-08-19 15:27 ` UDEV Greg KH
2010-08-24 12:50 ` UDEV Greg KH
  -- strict thread matches above, loose matches on Subject: below --
2005-08-11 18:28 udev Greg KH
2005-08-11 18:29 ` udev Mike
2005-08-11 19:16 ` udev Greg KH
2005-08-11 19:21 ` udev Mike
2005-08-11 19:36 ` udev Kay Sievers
2005-08-12 15:33 ` udev Mike
2005-08-12 18:03 ` udev Greg KH
2009-11-02 11:10 ` udev Oleg Puchinin
2009-11-02 11:50 ` udev Oleg Puchinin
2009-11-02 14:35 ` udev Andrey Borzenkov
2009-11-02 16:57 ` udev Alan Jenkins
2011-03-22 19:48 ` Udev Paulo Eliseu Weber
2011-03-22 19:58 ` Udev Kay Sievers
2004-08-08 22:47 udev Luke Kenneth Casson Leighton
2004-08-09 12:36 ` udev Luke Kenneth Casson Leighton
2004-08-09 12:40 ` udev Marco d'Itri

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).