From mboxrd@z Thu Jan  1 00:00:00 1970
From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 19 Nov 2009 09:51:06 -0500
Subject: [refpolicy] kernel_storage.patch
In-Reply-To: <4B0553F2.9020404@redhat.com>
References: <4AFC7862.9020205@redhat.com>
	<1258639437.27504.482.camel@gorn.columbia.tresys.com>
	<4B0553F2.9020404@redhat.com>
Message-ID: <1258642266.27504.492.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2009-11-19 at 09:19 -0500, Daniel J Walsh wrote:
> On 11/19/2009 09:03 AM, Christopher J. PeBenito wrote:
> > On Thu, 2009-11-12 at 16:04 -0500, Daniel J Walsh wrote:
> >> http://people.fedoraproject.org/~dwalsh/SELinux/F12/kernel_storage.patch
> >>
> >> add /dev/mtd*
> >>
> >> Fix a couple of interfaces
> > 
> > I don't understand why there would be a relabelto fixed_disk_device_t.
> > That implies the program is SELinux-aware, so this sounds like a bug
> > somewhere else.  Otherwise merged.
> > 
> > 
> I believe the app is doing a mknod and then running restorecon which would cause this?

But mknod would result in a device node, not a symlink, which is what is
being dontaudited for relabelto.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150