Re: udevd domain

On Sat, 10 Apr 2004 17:05, Rogelio Serrano <rogelio@smsglobal.net> wrote:
> What domain should udevd run in? udev_t or hotplug_t

If we are to create a new domain for udevd then it would probably be best to look at the devfsd policy for inspiration.

But does udev ever run as a daemon or is it always run from hotplug? As hotplug already has mknod capability it seems that having udev run in it's context would not involve adding significant privs. So it may be best to stick with hotplug_t.

I need to know more about udev to decide. Or if you write some policy I'll look at it and decide what to do (I can get a good idea of what a program does from the policy it needs).

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.