SELinux prohibits PCMCIA modem

[Daniel J Walsh]

Steve Snyder wrote:

>When my shiny-new FC4 installation boots, I get the following SELinux
>(config: SELINUX=enforcing) errors when attempting to configure the
>PCMCIA modem:
>
>kernel: audit(1123330762.372:2): avc:  denied  { read } for  pid=1628 comm="serial" name="MAKEDEV" dev=tmpfs ino=2379 scontext=system_u:system_r:cardmgr_t tcontext=system_u:object_r:device_t tclass=lnk_file
>kernel: audit(1123330762.372:3): avc:  denied  { read } for  pid=1628 comm="serial" name="MAKEDEV" dev=tmpfs ino=2379 scontext=system_u:system_r:cardmgr_t tcontext=system_u:object_r:device_t tclass=lnk_file
>kernel: audit(1123330762.372:4): avc:  denied  { read } for  pid=1628 comm="serial" name="MAKEDEV" dev=tmpfs ino=2379 scontext=system_u:system_r:cardmgr_t tcontext=system_u:object_r:device_t tclass=lnk_file
>kernel: audit(1123330762.405:5): avc:  denied  { associate} for  pid=1632 comm="ln" name="modem" scontext=system_u:object_r:cardmgr_lnk_ttcontext=system_u:object_r:tmpfs_t tclass=filesystem
>
>The way it is supposed to work is that a /dev/ttyS0 device is created and
>then a /dev/modem symlink points to that serial port.
>
>Since the errors references tmpfs, I should mention that I have /tmp mounted
>on a tmpfs filesystem.
>
>Can anyone tell me a work-around for this?
>
>Thanks.
>
>  
>
I will add this rule to the next update.

--