Device nodes have no type when booting a 2.6.32.*.fc12 kernel

[Stephen Smalley]

On Mon, 2010-05-24 at 11:54 -0700, Karl-Michael Schneider wrote:
> I have fc12 installed on a Lenovo R61 laptop with two kernels:
> 
> kernel-2.6.31.12-174.2.22.fc12.i686
> kernel-2.6.32.12-115.fc12.i686
> 
> The 2.6.31 kernel has no problem. But when I try to boot the 2.6.32
> kernel it fails because SELinux is blocking access to device nodes. I
> can only boot the 2.6.32 kernel in single user mode. The reason is
> that /dev and all files in it have no type:
> 
> $ ls -lZ /dev
> crw-------. root root system_u:object_r:unlabeled_t:s0 agpgart
<snip>
> The filesystem is ext3 on LVM:
> 
> $ cat /etc/fstab
> /dev/VolGroup00/LogVol00 /                       ext3    defaults        1 1
> ...
> 
> The filesystem was created when I installed FC9. Later I upgraded to
> FC12. But the problem only appeared when the kernel was updated from
> 2.6.31 to 2.6.32. All 2.6.32 kernels so far had the same problem.
> 
> I have already relabeled the filesystem, but it didn't help. I tried
> restorecon -R -v /dev after booting the 2.6.32 kernel but it didn't do
> anything.

Sounds like the devtmpfs mount with a policy that doesn't know about it.
dmesg | grep SELinux
grep /dev /proc/mounts

-- 
Stephen Smalley
National Security Agency