Bug 242102

Summary: kmod-nvidia udev_t selinux policy problem by F7
Product: [Fedora] Fedora Reporter: aldoem <aldoem>
Component: udevAssignee: Harald Hoyer <harald>
Status: CLOSED DUPLICATE QA Contact:
Severity: medium Docs Contact:
Priority: low    
Version: rawhideCC: dwalsh
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-06-04 11:44:21 EDT Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:

Description aldoem 2007-06-01 13:51:48 EDT
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; es-AR; rv:1.8.1.4) Gecko/20070530 Fedora/2.0.0.4-1.fc7 Firefox/2.0.0.4

Description of problem:
Kmod-nvidia from livna with fedora 7 kernel 2.6.21-1.3194.fc7 crash X server. cause: 
Jun  1 01:31:13 fedora kernel: audit(1180654249.239:4): avc:  denied  { getattr } for  pid=408 comm="cp" name="nvidia0" dev=sda4 ino=278538 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=chr_file

Jun  1 01:31:13 fedora kernel: audit(1180654249.239:5): avc:  denied  { getattr } for  pid=408 comm="cp" name="nvidia1" dev=sda4 ino=278539 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=chr_file

Jun  1 01:31:13 fedora kernel: audit(1180654249.239:6): avc:  denied  { getattr } for  pid=408 comm="cp" name="nvidia2" dev=sda4 ino=278540 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=chr_file

Jun  1 01:31:13 fedora kernel: audit(1180654249.239:7): avc:  denied  { getattr } for  pid=408 comm="cp" name="nvidia3" dev=sda4 ino=278541 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=chr_file

Jun  1 01:31:13 fedora kernel: audit(1180654249.239:8): avc:  denied  { getattr } for  pid=408 comm="cp" name="nvidiactl" dev=sda4 ino=278542 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:etc_t:s0 tclass=chr_file

after audit2allow -d i have:

#============= udev_t ==============
allow udev_t etc_t:chr_file { getattr create setattr };

its muss be in selinux policy.

Version-Release number of selected component (if applicable):


How reproducible:
Always


Steps to Reproduce:
1. system start
2. x server over kmod-nvidia crash
3. selinux to permissive then works

Actual Results:


Expected Results:


Additional info:
Comment 1 Daniel Walsh 2007-06-01 14:01:15 EDT
udev should not be creating devices (chr_file in /etc/)  Why aren;t these
created in /dev?
Comment 2 aldoem 2007-06-01 14:17:16 EDT
i don't know, i only install kmod-nvidia fron livna. it only work without selinux.
Comment 3 Harald Hoyer 2007-06-04 11:44:21 EDT

*** This bug has been marked as a duplicate of 241712 ***