selinux denials on rawhide. Some I can't get back

[Daniel J Walsh]

On 08/20/2009 08:27 AM, Antonio Olivares wrote:
> Dear fellow selinux experts,
> 
> I have encountered some weird denials while running rawhide.  But selinux troubleshooter is not allowing me to file bugs.  IT just hangs.  While running livecd I was able to file some bugs.  After installing(restoring a rawhide system using livecd), I can't do it.  I will attach a set of denials by selinux.
> 
> Thanks,
> 
> Antonio
> 
> 
>       
> 
> 
> ------------------------------------------------------------------------
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
All of the vbetool bugs are fixed in the latest rawhide udev transitions to vbetool_t

THe ones that are not vbetool related

#============= auditctl_t ==============
allow auditctl_t device_t:file write;

Dan> This is a bug in the initrd I believe,  it seems to be creating a file named /dev/null,   Or it is failing to create a file and the first process that redirects its output creates the file with the wrong label.

#============= initrc_t ==============
allow initrc_t etc_t:lnk_file { create unlink };

Fixed in selinux-policy-3.6.28-3.fc12

#============= udev_t ==============
allow udev_t self:capability sys_module;

This is a kernel fix that eparis is working on.  I believe it is bubbling through the kernel acceptance stream.