Re: Question on SELinux AVC messages with systemd.

2010-07-27 Thread Dave Jones
On Mon, Jul 26, 2010 at 02:39:55PM -0400, Bill Nottingham wrote: > Dave Jones (da...@redhat.com) said: > > of those that it does open(),.. Is there seriously a use-case for someone > > wanting > > lvm partitioned /dev/ram disks ? or /dev/loop ? > > I would assume that's for testing. point

Re: Question on SELinux AVC messages with systemd.

2010-07-26 Thread Bill Nottingham
Dave Jones (da...@redhat.com) said: > of those that it does open(),.. Is there seriously a use-case for someone > wanting > lvm partitioned /dev/ram disks ? or /dev/loop ? I would assume that's for testing. Bill -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.or

Re: Question on SELinux AVC messages with systemd.

2010-07-21 Thread Lennart Poettering
On Wed, 21.07.10 14:38, Dave Jones (da...@redhat.com) wrote: > > lvm is brain damaged. strace lvm pvscan, and watch as it opens a bunch > > of stuff that there's no way there'd ever be a volume on. > > /dev/snd/*, tty's, usbmon etc etc > > looking closer, it seems to be only stat'ing, instead

Re: Question on SELinux AVC messages with systemd.

2010-07-21 Thread Jon Masters
On Wed, 2010-07-21 at 14:30 -0400, Dave Jones wrote: > On Tue, Jul 20, 2010 at 04:26:14PM +0200, Lennart Poettering wrote: > > On Tue, 20.07.10 16:04, Lennart Poettering (mzerq...@0pointer.de) wrote: > > > > > I am not entirely sure though why those processes actually access those > > > dirs i

Re: Question on SELinux AVC messages with systemd.

2010-07-21 Thread Dave Jones
On Wed, Jul 21, 2010 at 02:30:03PM -0400, Dave Jones wrote: > On Tue, Jul 20, 2010 at 04:26:14PM +0200, Lennart Poettering wrote: > > On Tue, 20.07.10 16:04, Lennart Poettering (mzerq...@0pointer.de) wrote: > > > > > I am not entirely sure though why those processes actually access those >

Re: Question on SELinux AVC messages with systemd.

2010-07-21 Thread Dave Jones
On Tue, Jul 20, 2010 at 04:26:14PM +0200, Lennart Poettering wrote: > On Tue, 20.07.10 16:04, Lennart Poettering (mzerq...@0pointer.de) wrote: > > > I am not entirely sure though why those processes actually access those > > dirs in this case. Maybe they are iterating through the files in /dev

Re: Question on SELinux AVC messages with systemd.

2010-07-20 Thread Lennart Poettering
On Tue, 20.07.10 16:04, Lennart Poettering (mzerq...@0pointer.de) wrote: > I am not entirely sure though why those processes actually access those > dirs in this case. Maybe they are iterating through the files in /dev? > Smells a bit broken to me. OK, the udevd is a result from /lib/udev/devices

Re: Question on SELinux AVC messages with systemd.

2010-07-20 Thread Lennart Poettering
On Mon, 19.07.10 13:52, Daniel J Walsh (dwa...@redhat.com) wrote: > I am noticing the following in F14 > > type=1400 audit(1279559591.480:31): avc: denied { read } for pid=526 > comm="udevd" name="/" dev=autofs ino=9519 > scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 > tcontext=system_u:obj

Question on SELinux AVC messages with systemd.

2010-07-19 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I am noticing the following in F14 type=1400 audit(1279559591.480:31): avc: denied { read } for pid=526 comm="udevd" name="/" dev=autofs ino=9519 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tcontext=system_u:object_r:autofs_t:s0 tclass=dir typ