Package: selinux-policy-refpolicy-targeted
Version: 0.0.20070507-5
Severity: normal
I get the following errors during boot, when udev loads the alsa drivers and
runs /etc/init.d/alsa-utils:
Jun 10 13:36:47 tiberius kernel: audit(1181478929.356:5): avc: denied {
getattr } for pid=793 comm="alsa-utils" name="asound.state" dev=hda7
ino=908558 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_lib_t:s0 tclass=file
Jun 10 13:36:47 tiberius kernel: audit(1181478929.669:6): avc: denied {
read } for pid=796 comm="alsactl" name="asound.state" dev=hda7 ino=908558
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_lib_t:s0 tclass=file
Jun 10 13:36:47 tiberius kernel: audit(1181478929.812:7): avc: denied {
getattr } for pid=796 comm="alsactl" name="alsa.conf" dev=hda7 ino=182943
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:usr_t:s0 tclass=file
Jun 10 13:36:47 tiberius kernel: audit(1181478929.815:8): avc: denied {
read } for pid=796 comm="alsactl" name="alsa.conf" dev=hda7 ino=182943
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:usr_t:s0 tclass=file
Note that Debian has moved /etc/asound.state to /var/lib/alsa/asound.state.
Setting this file's context to system_u:object_r:etc_runtime_t:s0, what the
reference policy sets for /etc/asound.state, makes the first two errors go
away. I don't know if that is the correct solution, or if it should have
its own type.
alsa.conf lives not in /etc but in /usr/share/alsa, upstream as well as in
Debian. There is no reference to it in the reference policy.
--- System information. ---
Architecture: amd64
Kernel: Linux 2.6.21
Debian Release: lenny/sid
990 unstable www.debian-multimedia.org
990 unstable ftp.ie.debian.org
990 unstable ftp.heanet.ie
990 unstable ftp-uxsup.csx.cam.ac.uk
1 experimental ftp.ie.debian.org
1 experimental ftp-uxsup.csx.cam.ac.uk
--- Package information. ---
Depends (Version) | Installed
===================================-+-================
policycoreutils | 2.0.16-1
libpam-modules (>= 0.77-0.se5) | 0.79-4
python | 2.4.4-6
libselinux1 (>= 2.0.7) | 2.0.15-2
--
Martin Orr
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
