Bug 222337
| Summary: | [LSPP] nash-hotplug deny is stopping ia64 from booting | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 5 | Reporter: | Matt Anderson <mra> |
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 5.0 | CC: | iboverma, krisw, linda.knippers, sgrubb |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | RC | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2007-02-08 02:15:06 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
Fixed in selinux-policy-2.4.6-25 QE ack for RHEL5. A package has been built which should help the problem described in this bug report. This report is therefore being closed with a resolution of CURRENTRELEASE. You may reopen this bug report if the solution does not work for you. |
Description of problem: When installing with the mls policy an IA64 system cannot boot because it gets continuous denies from nash-hotplug Version-Release number of selected component (if applicable): selinux-policy-mls-2.4.6-22.el5 How reproducible: Everytime Steps to Reproduce: 1. 2. 3. Actual results: Here are the AVCs Jan 10 17:23:42 aphex kernel: audit(1168467802.082:3): avc: denied { write } for pid=353 comm="nash-hotplug" name="zero" dev=tmpfs ino=715 scontext=system_u:system_r:kernel_t:s15:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s15:c0.c1023 tclass=chr_file Jan 10 17:23:42 aphex kernel: audit(1168467802.084:4): avc: denied { write } for pid=353 comm="nash-hotplug" name="zero" dev=tmpfs ino=715 scontext=system_u:system_r:kernel_t:s15:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s15:c0.c1023 tclass=chr_file Jan 11 10:29:17 aphex kernel: audit(1168529338.087:3): avc: denied { write } for pid=353 comm="nash-hotplug" name="zero" dev=tmpfs ino=715 scontext=system_u:system_r:kernel_t:s15:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s0 tclass=chr_file Additional info: Here's my audit2allow output which once installed the system can boot just fine. module nashhotplug 1.0; require { class chr_file write; type kernel_t; type tmpfs_t; role system_r; }; allow kernel_t tmpfs_t:chr_file write;