hotplug_t?

[Stephen Smalley]

On Tue, 2006-08-01 at 07:05 +0200, Axel Thimm wrote:
> Process contexts:
> Current context:		root:system_r:hotplug_t:SystemLow-SystemHigh
> Init context:                   system_u:system_r:init_t
> /sbin/mingetty                  system_u:system_r:kernel_t
> /usr/sbin/sshd                  system_u:system_r:kernel_t

That's puzzling; init is in the correct domain (init_t) but mingetty and
sshd are in kernel_t rather than getty_t  init starts life in kernel_t,
then re-execs into init_t after loading policy, then performs normal
startup.  But there are no transitions back into kernel_t.  And the
files appear to have the right contexts.

rpm -q selinux-policy-targeted SysVinit
rpm -V selinux-policy-targeted
/usr/sbin/semodule -l
cmp /etc/selinux/targeted/modules/active/policy.kern /etc/selinux/targeted/policy/policy.20

-- 
Stephen Smalley
National Security Agency