initrc, md0, mapper

Tom London selinux at gmail.com
Fri Dec 3 16:34:22 UTC 2004


Running strict/enforcing, latest rawhide
(selinux-policy-strict-1.19.10-1)

Booting produces following avc:

Dec  3 08:23:45 fedora kernel: audit(1102090997.316:0): avc:  denied 
{ create } for  pid=1348 exe=/sbin/nash name=md0
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:device_t tclass=blk_file Dec  3 08:23:45
fedora kernel: device-mapper: 4.1.0-ioctl (2003-12-10) initialised:
dm at uk.sistina.com
Dec  3 08:23:45 fedora kernel: audit(1102090997.383:0): avc:  denied 
{ create } for  pid=1354 exe=/sbin/nash name=mapper
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:device_t tclass=dir

Does initrc get create perms for this?

tom

-- 
Tom London




More information about the fedora-selinux-list mailing list