Bug 744817

Summary: /dev/bsr4096_* are labelled system_u:object_r:device_t:s0
Product: Red Hat Enterprise Linux 6 Reporter: Milos Malik <mmalik>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Milos Malik <mmalik>
Severity: low Docs Contact:
Priority: low    
Version: 6.2CC: dwalsh, eparis
Target Milestone: rc   
Target Release: ---   
Hardware: ppc64   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.7.19-119.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2011-12-06 10:19:44 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Milos Malik 2011-10-10 15:14:15 UTC 
Description of problem:
I believe that /dev/bsr4096_* should not be labelled device_t.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.7.19-115.el6.noarch
selinux-policy-mls-3.7.19-115.el6.noarch
selinux-policy-3.7.19-115.el6.noarch
udev-147-2.40.el6.ppc64
  
Actual results:
# ls -Z /dev/bsr4096_0
crw-rw----. root root system_u:object_r:device_t:s0    /dev/bsr4096_0
# ls -l /dev/bsr4096_0
crw-rw----. 1 root root 251, 0 Oct 10 00:39 /dev/bsr4096_0
#
Comment 2 Miroslav Grepl 2011-10-11 13:50:06 UTC 
Eric, any idea how we should label it?
Comment 3 Daniel Walsh 2011-10-11 14:24:39 UTC 
What kind of device is it?  Google returns nothing.
Comment 4 Milos Malik 2011-10-11 17:10:51 UTC 
my best guess is: IBM POWER Barrier Synchronization Register
Comment 5 Daniel Walsh 2011-10-11 18:43:35 UTC 
Milos, Sure but have no idea what the proper label should be.

cpu_device_t may be as close as we have unless we want to add a new device type.
Comment 6 Miroslav Grepl 2011-10-12 09:53:21 UTC 
Milos, could you just label it using chcon and leave this label for a while during your testing.
Comment 7 Miroslav Grepl 2011-10-13 09:37:32 UTC 
I am fine with cpu_device_t.
Comment 8 Miroslav Grepl 2011-10-13 11:34:38 UTC 
Fixed in selinux-policy-3_7_19-117_el6
Comment 12 Daniel Walsh 2011-10-25 13:00:29 UTC 
/dev/bsr.*		-c	gen_context(system_u:object_r:cpu_device_t,s0)

Is in F16/Rawhide.
Comment 13 Miroslav Grepl 2011-10-25 16:18:39 UTC 
Fixed in selinux-policy-3.7.19-119.el6
Comment 15 errata-xmlrpc 2011-12-06 10:19:44 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1511.html