Bug 209380 - Fully-relabeled rawhide system give HAL avc denials
Summary: Fully-relabeled rawhide system give HAL avc denials
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy-targeted
Version: rawhide
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Ben Levenson
URL:
Whiteboard:
Depends On:
Blocks: FC6Blocker
TreeView+ depends on / blocked
 
Reported: 2006-10-04 22:39 UTC by Stephen Tweedie
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version: Current
Clone Of:
Environment:
Last Closed: 2007-08-22 14:16:40 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Stephen Tweedie 2006-10-04 22:39:08 UTC 
Description of problem:
After a reboot with /.autorelabel and thereafter, hal produces AVC errors on boot.

Version-Release number of selected component (if applicable):
hal-0.5.8.1-2.fc6
selinux-policy-targeted-2.3.18-3

How reproducible:
100%

Steps to Reproduce:
1. install
2. touch /.autorelabel, reboot
  
Actual results:
audit(1160001286.682:4): avc:  denied  { read write } for  pid=2691
comm="hal-storage-cle" name=".hal-mtab-lock" dev=dm-5 ino=526175
scontext=system_u:system_r:hald_t:s0 tcontext=system_u:object_r:default_t:s0
tclass=file
Comment 1 Daniel Walsh 2006-10-05 14:16:40 UTC 
Fixed in selinux-policy-2.3.18-4
Comment 2 Daniel Walsh 2007-08-22 14:16:40 UTC 
Should be fixed in the current release
Note You need to log in before you can comment on or make changes to this bug.