From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.7.2) Gecko/20040809 Epiphany/1.3.5 Description of problem: The ramfs filesystem does not support extended attributes. The means that SELinux can not properly label /dev when it is managed as a ramfs by udev. Upon booting, several error messages like the following are seen: /sbin/restorecon get context on /dev/foo failed: 'operation not supported' Version-Release number of selected component (if applicable): How reproducible: Always Steps to Reproduce: Set up a machine using udev. Specify UDEV_RAMFS="yes" and UDEV_KEEP_DEV="no" in /etc/udev/udev.conf. Reboot the system. Actual Results: Notice the "/sbin/restorecon get context on /dev/foo failed: 'operation not supported'" messages. Expected Results: Restorecon should be able to set the device nodes' SELinux contexts. Additional info:
I meant to open this bug against udev, not hal.
Reassign to udev maintainers
reassigning to component kernel. Patches for this exist. - patch for xattr http://hands.com/~lkcl/selinux/2.6.6
ok, strategy is to use tmpfs, which provides xattrs
ok, tmpfs does not have xattrs as well
Red Hat's kernel now seems to contain a patch that adds xattrs to tmpfs. New versions of mkinitrd mount /dev as a tmpfs.