Bug 155897

Linux localhost.localdomain 2.6.11-1.1261_FC4smp #1 SMP Fri Apr 22 21:33:11 EDT
2005 i686 i686 i386 GNU/Linux

selinux-policy-targeted-1.23.12-4

Whenever I run an 'rpm' transaction, all scripts (like preun, postun, etc) that
get run exit with status 255.  When that happens, I see the following in
/var/log/messages:

Apr 25 10:54:52 dcbw kernel: Unable to handle kernel NULL pointer dereference at
virtual address 00000000
Apr 25 10:54:52 dcbw kernel:  printing eip:
Apr 25 10:54:52 dcbw kernel: 00000000
Apr 25 10:54:52 dcbw kernel: *pde = 14a39001
Apr 25 10:54:52 dcbw kernel: Oops: 0000 [#1]
Apr 25 10:54:52 dcbw kernel: SMP
Apr 25 10:54:52 dcbw kernel: Modules linked in: loop parport_pc lp parport
autofs4 nfs lockd sunrpc dm_mod video button battery ac md5 ipv6 uhci_hcd
ehci_hcd tpm_nsc tpm i2c_i801 i2c_core snd_intel8x0 snd_ac97_codec snd_pcm_oss
snd_mixer_oss
snd_pcm snd_timer snd soundcore snd_page_alloc orinoco_pci orinoco hermes e1000
floppy ext3 jbd
Apr 25 10:54:52 dcbw kernel: CPU:    1
Apr 25 10:54:52 dcbw kernel: EIP:    0060:[<00000000>]    Not tainted VLI
Apr 25 10:54:52 dcbw kernel: EFLAGS: 00210286   (2.6.11-1.1261_FC4smp)
Apr 25 10:54:52 dcbw kernel: EIP is at 0x0
Apr 25 10:54:52 dcbw kernel: eax: e8771000   ebx: 01200011   ecx: 00000000  
edx: 00000000
Apr 25 10:54:52 dcbw kernel: esi: c1b0a540   edi: ddae9000   ebp: e8771000  
esp: e8771fc4
Apr 25 10:54:52 dcbw kernel: ds: 007b   es: 007b   ss: 0068
Apr 25 10:54:52 dcbw kernel: Process rpm (pid: 18861, threadinfo=e8771000
task=e23faa80)
Apr 25 10:54:52 dcbw kernel: Stack: 01202011 00000000 00000000 00000000 b7f8fa28
bfca6efc 00000000 c010007b
Apr 25 10:54:52 dcbw kernel:        c010007b 00000078 005ff7e2 00000073 00200286
bfca6e8c 0000007b
Apr 25 10:54:52 dcbw kernel: Call Trace:
Apr 25 10:54:52 dcbw kernel: Code:  Bad EIP value.


Current audit2allow -d:
allow hotplug_t file_t:file { execute execute_no_trans getattr read };
allow hotplug_t file_t:lnk_file read;
allow hotplug_t self:process setsched;
allow hotplug_t self:unix_dgram_socket sendto;
allow hotplug_t selinux_config_t:dir search;
allow hotplug_t selinux_config_t:file { getattr read };
allow kernel_t agp_device_t:chr_file { getattr relabelfrom relabelto setattr };
allow kernel_t clock_device_t:chr_file { getattr ioctl read relabelfrom relabelt
o setattr };
allow kernel_t console_device_t:chr_file { create relabelfrom relabelto rename s
etattr unlink };
allow kernel_t device_t:blk_file { create getattr ioctl read relabelfrom write } ;
allow kernel_t device_t:chr_file create getattr ioctl read relabelfrom relabelto
 rename setattr write;
allow kernel_t device_t:dir { mounton relabelto };
allow kernel_t device_t:file relabelto;
allow kernel_t device_t:sock_file { create setattr write };
allow kernel_t devpts_t:chr_file { getattr ioctl read setattr write };
allow kernel_t devpts_t:dir { getattr read search };
allow kernel_t devtty_t:chr_file create getattr ioctl read relabelfrom relabelto
 rename setattr unlink write;
allow kernel_t dhcpc_port_t:udp_socket name_bind;
allow kernel_t etc_runtime_t:file relabelto;
allow kernel_t etc_t:dir mounton;
allow kernel_t etc_t:file { execute execute_no_trans };
allow kernel_t event_device_t:chr_file { create getattr ioctl read setattr };
allow kernel_t file_t:file relabelfrom;
allow kernel_t file_t:sock_file { getattr unlink };
allow kernel_t fixed_disk_device_t:blk_file create getattr ioctl read relabelfro
m relabelto rename setattr write;
allow kernel_t hotplug_t:dir search;
allow kernel_t hotplug_t:file { getattr read };
allow kernel_t hotplug_t:lnk_file read;
allow kernel_t howl_port_t:tcp_socket name_bind;
allow kernel_t howl_port_t:udp_socket name_bind;
allow kernel_t i18n_input_var_run_t:sock_file create;
allow kernel_t initctl_t:fifo_file { getattr read relabelto write };
allow kernel_t initrc_exec_t:file { execute execute_no_trans };
allow kernel_t ipp_port_t:tcp_socket name_bind;
allow kernel_t ipp_port_t:udp_socket name_bind;
allow kernel_t self:file write;
allow kernel_t self:netlink_audit_socket create;
allow kernel_t self:netlink_kobject_uevent_socket { create getattr };
allow kernel_t self:netlink_route_socket create;
allow kernel_t self:netlink_selinux_socket create;
allow kernel_t self:packet_socket { create ioctl read };
allow kernel_t self:process { execmem setexec setfscreate };
allow kernel_t self:system { syslog_console syslog_mod syslog_read };
allow kernel_t ld_so_cache_t:file relabelto;
allow kernel_t lib_t:file execute_no_trans;
allow kernel_t memory_device_t:chr_file { execute getattr read relabelfrom relab
elto setattr write };
allow kernel_t mnt_t:dir mounton;
allow kernel_t mouse_device_t:chr_file { create getattr ioctl read relabelto set
attr write };
allow kernel_t mtrr_device_t:file { ioctl write };
allow kernel_t nfs_t:dir { getattr search };
allow kernel_t nfs_t:file { append getattr read };
allow kernel_t ntp_port_t:udp_socket name_bind;
allow kernel_t ntpd_exec_t:file { execute execute_no_trans };
allow kernel_t ntpdate_exec_t:file { execute execute_no_trans };
allow kernel_t null_device_t:chr_file { create relabelfrom relabelto rename seta
ttr unlink };
allow kernel_t port_t:tcp_socket name_connect;
allow kernel_t portmap_exec_t:file { execute execute_no_trans };
allow kernel_t portmap_port_t:tcp_socket { name_bind name_connect };
allow kernel_t portmap_port_t:udp_socket name_bind;
allow kernel_t printer_device_t:chr_file { create getattr rename setattr write } ;
allow kernel_t proc_kmsg_t:file read;
allow kernel_t proc_t:dir mounton;
allow kernel_t proc_t:file write;
allow kernel_t ptmx_t:chr_file { getattr ioctl read relabelfrom relabelto setatt
r write };
allow kernel_t ramfs_t:dir { add_name remove_name search setattr write };
allow kernel_t ramfs_t:fifo_file { create getattr ioctl read unlink write };
allow kernel_t ramfs_t:file { create unlink write };
allow kernel_t ramfs_t:sock_file { create setattr unlink write };
allow kernel_t random_device_t:chr_file { getattr read relabelfrom relabelto set
attr };
allow kernel_t removable_device_t:blk_file { create getattr ioctl read relabelto
 setattr write };
allow kernel_t reserved_port_t:tcp_socket { name_bind name_connect };
allow kernel_t reserved_port_t:udp_socket name_bind;
allow kernel_t rpc_pipefs_t:dir { getattr read search };
allow kernel_t sbin_t:file { execute execute_no_trans };
allow kernel_t security_t:security { check_context compute_av compute_user };
allow kernel_t sendmail_exec_t:file { execute execute_no_trans };
allow kernel_t smtp_port_t:tcp_socket name_bind;
allow kernel_t sound_device_t:chr_file { create getattr ioctl read setattr write  };
allow kernel_t ssh_port_t:tcp_socket name_bind;
allow kernel_t sysctl_dev_t:dir search;
allow kernel_t sysctl_dev_t:file { getattr read };
allow kernel_t sysctl_hotplug_t:file { getattr read write };
allow kernel_t sysctl_modprobe_t:file { getattr write };
allow kernel_t sysctl_net_t:dir search;
allow kernel_t sysctl_net_t:file { getattr write };
allow kernel_t sysctl_rpc_t:dir search;
allow kernel_t sysctl_t:dir { getattr mounton };
allow kernel_t sysfs_t:dir { getattr read };
allow kernel_t sysfs_t:file { getattr read };
allow kernel_t sysfs_t:lnk_file { getattr read };
allow kernel_t syslogd_exec_t:file { execute execute_no_trans };
allow kernel_t tmp_t:sock_file { create getattr setattr write };
allow kernel_t tmpfs_t:blk_file { getattr relabelfrom };
allow kernel_t tmpfs_t:chr_file { getattr ioctl read relabelfrom write };
allow kernel_t tmpfs_t:dir { mounton relabelfrom };
allow kernel_t tmpfs_t:fifo_file { create getattr read relabelfrom write };
allow kernel_t tmpfs_t:file relabelfrom;
allow kernel_t tty_device_t:chr_file create getattr ioctl read relabelfrom relab
elto rename setattr unlink write;
allow kernel_t tun_tap_device_t:chr_file { create getattr rename setattr };
allow kernel_t udev_helper_exec_t:file { execute execute_no_trans };
allow kernel_t unconfined_t:dir search;
allow kernel_t unconfined_t:file read;
allow kernel_t unconfined_t:process { noatsecure rlimitinh siginh transition };
allow kernel_t unconfined_t:shm { associate getattr read unix_read unix_write wr
ite };
allow kernel_t urandom_device_t:chr_file { getattr ioctl read relabelfrom relabe
lto setattr write };
allow kernel_t usbfs_t:dir getattr;
allow kernel_t user_home_dir_t:dir mounton;
allow kernel_t var_lib_nfs_t:dir mounton;
allow kernel_t var_run_t:sock_file { create setattr write };
allow kernel_t xserver_log_t:fifo_file { create getattr read setattr write };
allow kernel_t xserver_port_t:tcp_socket { name_bind name_connect };
allow kernel_t zero_device_t:chr_file { create getattr relabelfrom relabelto ren
ame setattr unlink };