'unable to relabel' in /dev.... MAKEDEV-3.7-2

Tom London selinux at comcast.net
Tue Jun 15 17:13:31 UTC 2004


Running off of the development tree, MAKEDEV-3.7-2 creates lots of new 
files. Running 'fixfiles relabel' or 'setfiles -v $FC /dev' generates 
lots of error messages like:

/dev/ptyu7: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptyu7 to 
system_u:object_r:device_t
/dev/ptyd7: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptyd7 to 
system_u:object_r:device_t
/dev/ptyde: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptyde to 
system_u:object_r:device_t
/dev/ptyac: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptyac to 
system_u:object_r:device_t
/dev/ptys1: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptys1 to 
system_u:object_r:device_t
/dev/ircomm9: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ircomm9 to 
system_u:object_r:device_t
/dev/ptyre: Permission denied
/usr/sbin/setfiles:  unable to relabel /dev/ptyre to 
system_u:object_r:device_t

Here is an 'ls -l' of one of the files:
[root at dell dev]# ls -l ptyu7
crw-rw-rw-  1 root tty 2, 87 Jun 14 12:42 ptyu7
[root at dell dev]# ls -lZ $_
crw-rw-rw-  root     tty      root:object_r:device_t           ptyu7
[root at dell dev]#

I'm running selinux-policy-strict-1.13.4-6, with file_contexts augmented 
with Russell Coker's fix for /udev/microcode.

tom



More information about the fedora-selinux-list mailing list