'unable to relabel' in /dev.... MAKEDEV-3.7-2, AVCs provided
Russell Coker
russell at coker.com.au
Wed Jun 16 01:50:41 UTC 2004
On Wed, 16 Jun 2004 08:07, Tom London <selinux at comcast.net> wrote:
> I'm confused.... restorecon.te has entries:
> allow restorecon_t device_type:{ chr_file blk_file } { getattr
> relabelfrom relabelto };
> allow restorecon_t device_t:{ chr_file blk_file } { getattr relabelfrom };
Ideally there should be no device nodes with type device_t, we should have
correct labels assigned to all of them. Therefore changing a label from
something in device_type to device_t is generally not desired.
--
http://www.coker.com.au/selinux/ My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/ Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/ Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/ My home page
More information about the fedora-selinux-list
mailing list