Red Hat Bugzilla – Bug 130619
Ramfs/Tmpfs/udev does not support SELinux EA's
Last modified: 2007-11-30 17:10:47 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux ppc; en-US; rv:1.7.2)
Description of problem:
The ramfs filesystem does not support extended attributes. The means
that SELinux can not properly label /dev when it is managed as a ramfs
by udev. Upon booting, several error messages like the following are
/sbin/restorecon get context on /dev/foo failed: 'operation not supported'
Version-Release number of selected component (if applicable):
Steps to Reproduce:
Set up a machine using udev. Specify UDEV_RAMFS="yes" and
UDEV_KEEP_DEV="no" in /etc/udev/udev.conf. Reboot the system.
Actual Results: Notice the "/sbin/restorecon get context on /dev/foo
failed: 'operation not supported'" messages.
Expected Results: Restorecon should be able to set the device nodes'
I meant to open this bug against udev, not hal.
Reassign to udev maintainers
reassigning to component kernel. Patches for this exist.
- patch for xattr http://hands.com/~lkcl/selinux/2.6.6
ok, strategy is to use tmpfs, which provides xattrs
ok, tmpfs does not have xattrs as well
Red Hat's kernel now seems to contain a patch that adds xattrs to
tmpfs. New versions of mkinitrd mount /dev as a tmpfs.