Problem installing kernel-2.6.9-1.1037_FC4, mkinitrd, ...

Tom London selinux at gmail.com
Fri Dec 17 16:32:36 UTC 2004


Running strict/enforcing, latest Rawhide.

installing today's kernel reports:

Installing: kernel 100 % done 1/1
/bin/bash: /root/.bashrc: Permission denied
ln: creating symbolic link `/tmp/initrd.L17712/sbin' to `bin':
Permission deniedln: creating symbolic link
`/tmp/initrd.L17712/sbin/modprobe' to `/sbin/nash': No such file or
directory
cp: cannot create regular file `/tmp/initrd.L17712/sbin/udev': No such
file or directory
ln: creating symbolic link `/tmp/initrd.L17712/sbin/udevstart' to
`udev': No such file or directory
ln: creating symbolic link `/tmp/initrd.L17712/sbin/hotplug' to
`/sbin/nash': No such file or directory

with the following AVC;
Dec 17 08:25:06 fedora kernel: audit(1103300706.529:0): avc:  denied 
{ create } for  pid=17723 exe=/bin/ln name=sbin
scontext=root:sysadm_r:bootloader_t
tcontext=root:object_r:bootloader_tmp_t tclass=lnk_file

This patch seems to fix it.....
   tom

--- bootloader.te.old   2004-12-17 08:31:33.195853461 -0800
+++ bootloader.te       2004-12-17 08:27:51.453938491 -0800
@@ -29,7 +29,7 @@
 allow bootloader_t { initrc_t privfd }:fd use;

 tmp_domain(bootloader, `, device_type')
-allow bootloader_t bootloader_tmp_t:devfile_class_set create_file_perms;
+allow bootloader_t bootloader_tmp_t:{ devfile_class_set lnk_file }
create_file_perms;

 read_locale(bootloader_t)



-- 
Tom London




More information about the fedora-selinux-list mailing list