On Sun, 24 Feb 2002, Russell Coker wrote:

> In either case we need to have devfsd manage SIDs on devfs nodes, currently
> /dev/initctl and /dev/log don't get assigned a SID on devfs (also other pipes
> and sockets would have the same problem - but aren't as important and don't
> fail as spectacularly).

Files created at runtime, such as /dev/initctl and /dev/log, should be labeled based on the file_type_auto_trans() rules that already exist for the appropriate domains. Of course, the current rules assume that the parent directory type is device_t. I see that you changed the / entry in devfs_contexts from device_t to devfs_t. I'm not sure I agree with that change - it will require additional file_type_auto_trans rules for the devfs case. Why not use device_t for both devfs and traditional /dev?

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.