Hide Forgot
Description of problem: "/sbin/MAKEDEV isdn" doesn't create /dev/isdnctrl (which should be a symlink to /dev/isdnctrl AFAIK) Version-Release number of selected component (if applicable): MAKEDEV-3.13-1
audit(1100206012.521:0): avc: denied { create } for pid=2149 exe=/sbin/MAKEDEV name=isdnctrl scontext=user_u:system_r actually seems to be a selinux problem
The interesting thing is, I can create the link manually without problems. [root@bserv dev]# rm -f isdn* [root@bserv dev]# id uid=0(root) gid=0(root) Gruppen=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=root:system_r:unconfined_t [root@bserv dev]# /sbin/MAKEDEV isdn error making /dev/isdnctrl: Permission denied [root@bserv dev]# dmesg|tail -1 audit(1100208530.931:0): avc: denied { create } for pid=5649 exe=/sbin/MAKEDEV name=isdnctrl scontext=root:system_r:unconfined_t tcontext=system_u:object_r:tty_device_t tclass=lnk_file [root@bserv dev]# ln -s isdnctrl0 isdnctrl
It is blowing up trying to create a lnk file as a tty device. Can you do a setenforce 0 and then run the MAKEDEV and then attach the avc messages. Dan
[root@bserv dev]# setenforce 0 [root@bserv dev]# /sbin/MAKEDEV isdn [root@bserv dev]# dmesg|tail -1 audit(1100245234.042:0): avc: denied { create } for pid=15098 exe=/sbin/MAKEDEV name=isdnctrl scontext=root:system_r:unconfined_t tcontext=system_u:object_r:tty_device_t tclass=lnk_file [root@bserv dev]# rm -f isdn* [root@bserv dev]# strace -o /root/makedev-isdn-trace /sbin/MAKEDEV isdn
Created attachment 106554 [details] strace MAKEDEV [root@bserv dev]# ls -lZ isdnctrl lrwxrwxrwx root root system_u:object_r:tty_device_t isdnctrl -> isdnctrl0
[root@bserv dev]# rm -f isdnctrl [root@bserv dev]# ln -s isdnctrl0 isdnctrl [root@bserv dev]# ls -lZ isdnctrl lrwxrwxrwx root root root:object_r:device_t isdnctrl -> isdnctrl0
Created attachment 106599 [details] Not creating Lnk_Files with the correct context. This patch fixes problem
Good catch! Merging into 3.15-1 and later.
Any chance an FC3 update will get pushed Nalin?
Using a recompiled MAKEDEV package from FC4 in FC3 seems to fix the issue for me.