selinux denials on rawhide. Some I can't get back

Daniel J Walsh dwalsh at
Thu Aug 20 13:47:29 UTC 2009

On 08/20/2009 08:27 AM, Antonio Olivares wrote:
> Dear fellow selinux experts,
> I have encountered some weird denials while running rawhide.  But selinux troubleshooter is not allowing me to file bugs.  IT just hangs.  While running livecd I was able to file some bugs.  After installing(restoring a rawhide system using livecd), I can't do it.  I will attach a set of denials by selinux.
> Thanks,
> Antonio
> ------------------------------------------------------------------------
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at
All of the vbetool bugs are fixed in the latest rawhide udev transitions to vbetool_t

THe ones that are not vbetool related

#============= auditctl_t ==============
allow auditctl_t device_t:file write;

Dan> This is a bug in the initrd I believe,  it seems to be creating a file named /dev/null,   Or it is failing to create a file and the first process that redirects its output creates the file with the wrong label.

#============= initrc_t ==============
allow initrc_t etc_t:lnk_file { create unlink };

Fixed in selinux-policy-3.6.28-3.fc12

#============= udev_t ==============
allow udev_t self:capability sys_module;

This is a kernel fix that eparis is working on.  I believe it is bubbling through the kernel acceptance stream. 

More information about the fedora-selinux-list mailing list