up2date, Large Medium and small updates....

[Russell Coker]

On Wed, 10 Mar 2004 22:24, "Stephen C. Tweedie" <sct at redhat.com> wrote:
> > If you accidentally boot a non-SE kernel then /etc/mtab and a few other
> > files
> > will get the wrong label, which will be really annoying for you.
>
> Yep, I noticed that one too.  Hard to miss it when the box won't boot.

/etc/mtab is a special case in that it's quite trivial and also very annoying.

I will change the policy to allow mount_t to read and unlink file_t:file.  
Then it should be able to do it's stuff.

Please put the following in your policy and see if it solves things for you 
next time you boot a non-SE kernel (sorry I don't have a machine I feel like 
booting a non-SE kernel on at the moment).
allow mount_t file_t:file { getattr read unlink };

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page