Bug 744817 - /dev/bsr4096_* are labelled system_u:object_r:device_t:s0
Summary: /dev/bsr4096_* are labelled system_u:object_r:device_t:s0
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: selinux-policy
Version: 6.2
Hardware: ppc64
OS: Linux
low
low
Target Milestone: rc
: ---
Assignee: Miroslav Grepl
QA Contact: Milos Malik
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-10-10 15:14 UTC by Milos Malik
Modified: 2012-10-16 12:11 UTC (History)
2 users (show)

Fixed In Version: selinux-policy-3.7.19-119.el6
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2011-12-06 10:19:44 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1511 0 normal SHIPPED_LIVE selinux-policy bug fix and enhancement update 2011-12-06 00:39:17 UTC

Description Milos Malik 2011-10-10 15:14:15 UTC 
Description of problem:
I believe that /dev/bsr4096_* should not be labelled device_t.

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.7.19-115.el6.noarch
selinux-policy-mls-3.7.19-115.el6.noarch
selinux-policy-3.7.19-115.el6.noarch
udev-147-2.40.el6.ppc64
  
Actual results:
# ls -Z /dev/bsr4096_0
crw-rw----. root root system_u:object_r:device_t:s0    /dev/bsr4096_0
# ls -l /dev/bsr4096_0
crw-rw----. 1 root root 251, 0 Oct 10 00:39 /dev/bsr4096_0
#
Comment 2 Miroslav Grepl 2011-10-11 13:50:06 UTC 
Eric, any idea how we should label it?
Comment 3 Daniel Walsh 2011-10-11 14:24:39 UTC 
What kind of device is it?  Google returns nothing.
Comment 4 Milos Malik 2011-10-11 17:10:51 UTC 
my best guess is: IBM POWER Barrier Synchronization Register
Comment 5 Daniel Walsh 2011-10-11 18:43:35 UTC 
Milos, Sure but have no idea what the proper label should be.

cpu_device_t may be as close as we have unless we want to add a new device type.
Comment 6 Miroslav Grepl 2011-10-12 09:53:21 UTC 
Milos, could you just label it using chcon and leave this label for a while during your testing.
Comment 7 Miroslav Grepl 2011-10-13 09:37:32 UTC 
I am fine with cpu_device_t.
Comment 8 Miroslav Grepl 2011-10-13 11:34:38 UTC 
Fixed in selinux-policy-3_7_19-117_el6
Comment 12 Daniel Walsh 2011-10-25 13:00:29 UTC 
/dev/bsr.*		-c	gen_context(system_u:object_r:cpu_device_t,s0)

Is in F16/Rawhide.
Comment 13 Miroslav Grepl 2011-10-25 16:18:39 UTC 
Fixed in selinux-policy-3.7.19-119.el6
Comment 15 errata-xmlrpc 2011-12-06 10:19:44 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2011-1511.html
Note You need to log in before you can comment on or make changes to this bug.