audio-entropd needs some help....

[Stephen Smalley]

On Mon, 2007-06-11 at 16:16 -0500, Tom "spot" Callaway wrote:
> On Mon, 2007-06-11 at 12:07 -0700, Tom London wrote:
> > On 6/10/07, Tom London <selinux at gmail.com> wrote:
> > > Running latest Rawhide, targeted.
> > >
> > > Running in enforcing mode, audio-entropyd fails to start.
> > >
> > > Flipping to permissive mode and restarting, I get these:
> 
> (audit messages snipped)
> 
> I tried to make a module for audio-entropyd to fix this, but it doesn't
> seem to do the job. Can anyone advise me on what I'm doing wrong?
> 
> Here are my three files:
> 
> http://people.redhat.com/tcallawa/selinux/
> 
> Thanks in advance,

Can you clarify what you mean by "doesn't seem to do the job"?  You
still get avc denials?  Which ones?

Some avc denials may be caused by components other than the TE rules,
audit2why tries to diagnose them (but is pretty klunky at present).

-- 
Stephen Smalley
National Security Agency