Description of problem: When logging via gdm, I get these AVC denials and gdm crashes -- I was actually not able to login. module myhal 1.0; require { type var_run_t; type hald_acl_t; class file { rename write getattr read lock create unlink }; class dir { write remove_name add_name }; } #============= hald_acl_t ============== allow hald_acl_t var_run_t:dir { write remove_name add_name }; allow hald_acl_t var_run_t:file { rename write getattr read lock create unlink } Version-Release number of selected component (if applicable): [matej@viklef ~]$ rpm -q hal hal-0.5.11-0.2.rc2.fc9.i386 selinux-policy-targeted-3.3.1-26.fc9.noarch gdm-2.21.10-0.2008.03.26.3.fc9.i386 How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Created attachment 299772 [details] myhal module
I think these are fixed in the latest policy update by labeling /var/run/hald hald_var_run_t Fixed in selinux-policy-3.3.26.fc9