Bug 343931

Summary: SELinux is preventing /usr/libexec/hald-addon-macbookpro-backlight (hald_mac_t) "read" to <Unknown> (memory_device_t)
Product: [Fedora] Fedora Reporter: Ruben Kerkhof <ruben>
Component: selinux-policyAssignee: Daniel Walsh <dwalsh>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhide   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2007-10-30 03:44:39 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ruben Kerkhof 2007-10-20 16:26:37 UTC
This is on my Macbook Pro Core Duo (first generation).
Sealert output:

Source Context                system_u:system_r:hald_mac_t:s0
Target Context                system_u:object_r:memory_device_t:s0
Target Objects                None [ chr_file ]
Affected RPM Packages         
Policy RPM                    
Selinux Enabled               
Policy Type                   
MLS Enabled                   
Enforcing Mode                
Plugin Name                   plugins.catchall_file
Host Name                     
Platform                      
Alert Count                   1
First Seen                    Sat Oct 20 13:44:29 2007
Last Seen                     Sat Oct 20 13:44:29 2007
Local ID                      6df37c04-6e4e-424d-8489-a1cff33c6d73
Line Numbers                  8,9

Raw Audit Messages            

avc: denied { read } for comm=hald-addon-macb dev=tmpfs egid=0 euid=0
exe=/usr/libexec/hald-addon-macbookpro-backlight exit=-13 fsgid=0 fsuid=0 gid=0
items=0 name=mem pid=2620 scontext=system_u:system_r:hald_mac_t:s0 sgid=0
subj=system_u:system_r:hald_mac_t:s0 suid=0 tclass=chr_file
tcontext=system_u:object_r:memory_device_t:s0 tty=(none) uid=0

Comment 1 Daniel Walsh 2007-10-22 14:00:11 UTC
Fixed in selinux-policy-3.0.8-29.fc8.src.rpm


Comment 2 Ruben Kerkhof 2007-10-27 14:37:53 UTC
Thanks, works ok now.