/etc/blkid.tab, /etc/avahi/etc/localtime

Tom London selinux at gmail.com
Thu Jan 26 15:26:15 UTC 2006


Running targeted/enforcing, latest rawhide.

I get these with 'restorecon -v -R /etc':
restorecon reset /etc/avahi/etc/localtime context
system_u:object_r:locale_t->system_u:object_r:etc_t
restorecon reset /etc/blkid.tab context
user_u:object_r:etc_t->system_u:object_r:etc_runtime_t

First, I believe the avahi chroots to /etc/avahi, so shouldn't its
'local copy' of localtime be locale_t?

Second, checking /var/log/messages, I get:
Jan 26 06:50:41 localhost kernel: audit(1138286986.121:2): avc: 
denied  { write } for  pid=1554 comm="mount" name="blkid.tab" dev=dm-0
ino=1275806 scontext=system_u:system_r:mount_t:s0
tcontext=user_u:object_r:etc_t:s0 tclass=file
Jan 26 06:50:41 localhost kernel: floppy0: no floppy controllers found
Jan 26 06:50:41 localhost kernel: audit(1138286987.665:3): avc: 
denied  { write } for  pid=1602 comm="swapon" name="blkid.tab"
dev=dm-0 ino=1275806 scontext=system_u:system_r:fsadm_t:s0
tcontext=user_u:object_r:etc_t:s0 tclass=file
Jan 26 06:50:41 localhost kernel: Adding 1048568k swap on
/dev/VolGroup00/LogVol01.  Priority:-1 extents:1 across:1048568k

So it looks like blkid.tab's type is getting (periodically) wedged.
I'm guessing this occurs when I do a 'mount' (manual) or insert a usb
drive of some sort.

More needed here to figure out?

tom
--
Tom London




More information about the fedora-selinux-list mailing list