hotplug_t?

Stephen Smalley sds at tycho.nsa.gov
Tue Aug 1 12:48:41 UTC 2006


On Tue, 2006-08-01 at 07:10 +0200, Axel Thimm wrote:
> On Mon, Jul 31, 2006 at 10:41:42AM -0400, Daniel J Walsh wrote:
> > Axel Thimm wrote:
> > >Hi,
> > >
> > >after upgrading FC4 to FC5 and enabling selinux/targeted/permissive I
> > >see lot's of hotplug_t domains. Most prominently every bash login and
> > >the default ssh -l root domains (before newrole) are such. This
> > >doesn't look right, did the upgrade go wrong somewhere?
> > >
> > >Thanks!
> > >  
> > Sounds like you have a major labeling problem.  touch /.autorelabel; reboot
> 
> As said I cannot put the system off-line for several hours and the
> last relabeling took about 5-6h.
> 
> But the relabeling was done according to /etc/rc.sysinit, only
> manually. E.g. I rm'd /.autorelabel, rebooted and called
> /sbin/fixfiles restore
> 
> The following is also returning an empty output:
> 
> # ls -Z {,/usr}/*bin/*| grep hotplug_t

hotplug_t is the domain of the process, whereas the executable file
would have hotplug_exec_t.

-- 
Stephen Smalley
National Security Agency




More information about the fedora-selinux-list mailing list