rawhide avcs...(hostname, restorecon)

[Daniel J Walsh]

Tom London wrote:
> Avcs from today's rawhide (selinux-policy-targeted-2.1.10-1) (enforcing):
>
> >From /var/log/messages:
> Jan 14 09:27:16 localhost kernel: SELinux: initialized (dev sysfs,
> type sysfs), uses genfs_contexts
> Jan 14 09:27:16 localhost kernel: audit(1137230757.160:2): avc: 
> denied  { read write } for  pid=400 comm="hostname" name="console"
> dev=tmpfs ino=560 scontext=system_u:system_r:hostname_t:s0
> tcontext=system_u:object_r:tmpfs_t:s0 tclass=chr_file
> Jan 14 09:27:16 localhost kernel: audit(1137230757.160:3): avc: 
> denied  { read write } for  pid=400 comm="hostname" name="console"
> dev=tmpfs ino=560 scontext=system_u:system_r:hostname_t:s0
> tcontext=system_u:object_r:tmpfs_t:s0 tclass=chr_file
> Jan 14 09:27:16 localhost kernel: audit(1137230757.160:4): avc: 
> denied  { read write } for  pid=400 comm="hostname" name="console"
> dev=tmpfs ino=560 scontext=system_u:system_r:hostname_t:s0
> tcontext=system_u:object_r:tmpfs_t:s0 tclass=chr_file
> Jan 14 09:27:16 localhost kernel: SELinux: initialized (dev usbfs,
> type usbfs), uses genfs_contexts
> Jan 14 09:27:16 localhost kernel: audit(1137230758.780:5): avc: 
> denied  { write } for  pid=413 comm="restorecon" name="[987]"
> dev=pipefs ino=987 scontext=system_u:system_r:restorecon_t:s0
> tcontext=system_u:system_r:restorecon_t:s0 tclass=fifo_file
> Jan 14 09:27:16 localhost kernel: audit(1137230758.780:6): avc: 
> denied  { read } for  pid=412 comm="restorecon" name="[987]"
> dev=pipefs ino=987 scontext=system_u:system_r:restorecon_t:s0
> tcontext=system_u:system_r:restorecon_t:s0 tclass=fifo_file
> Jan 14 09:27:16 localhost kernel: hw_random hardware driver 1.0.0 loaded
>
> --
> Tom London
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
2.1.11-1 should fix