udev selinux problem? "udevd_event selinux_setfilecon failed"

[Douglas McClendon]

I may yet file a bug, if I can provide instructions on how to reproduce 
this.  But since I'm working from an extremely modified environment, 
I'll just ask for general advice-

I've spun an selinux-enabled livecd, and upon starting up, and starting 
udev, I get a whole bunch of 'errors' (perhaps harmless) that look 
vaguely like the following-

udevd_event selinux_setfilecon failed permission denied /dev/usbdev....

I googled for selinux_setfilecon and found basically nothing.

Do these keywords ring a bell to anyone?

the /dev/usbdev... means that I get the same error half a dozen times 
(seems relative to how many usb devices are plugged in) with various 
non-intuitive incarnations of that filename.

-dmc

[Colin Walters]

On 9/28/07, Douglas McClendon <dmc.fedora(a)filteredperception.org&gt; wrote:
>  udevd_event selinux_setfilecon failed permission denied /dev/usbdev.... 

Is it possible to get audit events from this early boot?  Maybe audit to the
network?  (Though with a quick look at
http://people.redhat.com/sgrubb/audit/ I don't see that)

[Jeremy Katz]

On Fri, 2007-09-28 at 01:04 -0500, Douglas McClendon wrote:
>  I may yet file a bug, if I can provide instructions on how to
> reproduce 
>  this.  But since I'm working from an extremely modified environment, 
>  I'll just ask for general advice-
>  
>  I've spun an selinux-enabled livecd, and upon starting up, and starting 
>  udev, I get a whole bunch of 'errors' (perhaps harmless) that look 
>  vaguely like the following-
>  
>  udevd_event selinux_setfilecon failed permission denied /dev/usbdev....
>  
>  I googled for selinux_setfilecon and found basically nothing.
>  
>  Do these keywords ring a bell to anyone? 
It looks like (from the messages) that udev is trying to set a file
context based upon its config but that it's not being allowed to do so.
Probably because it's running as a type that isn't allowed to set those
contexts on files.  

So I'd take a look the context of udevd with ps -Z and see if it's a
context that's allowed to set file contexts of the appropriate type

Jeremy

[Jane Dogalt]

--- Colin Walters <walters(a)redhat.com&gt; wrote:

>  On 9/28/07, Douglas McClendon
> <dmc.fedora(a)filteredperception.org&gt; wrote:
>  >
>  >
>  > udevd_event selinux_setfilecon failed permission denied /dev/usbdev....
>  
>  
>  Is it possible to get audit events from this early boot?  Maybe audit to the
>  network?  (Though with a quick look at
>  http://people.redhat.com/sgrubb/audit/ I don't see that) 
 
Here are the relevant full denial log messages-  Again, this is f7+updates, and
not yet a real livecd-tools bug (until I can make a bug report with
reproducibility procedure).  But still... ???  (which udev rules are creating
these devices, do they look 'normal'?  I've never noticed or used them until
now)

Oct  1 18:34:30 zyx-live kernel: kjournald starting.  Commit interval 5 seconds
Oct  1 18:34:30 zyx-live kernel: EXT3-fs: mounted filesystem with ordered data
mode.
Oct  1 18:34:30 zyx-live kernel: audit(1191281609.589:2): enforcing=1
old_enforcing=0 auid=4294967295
Oct  1 18:34:30 zyx-live kernel: inode_doinit_with_dentry:  no dentry for
dev=dm-0 ino=459288
Oct  1 18:34:30 zyx-live kernel: inode_doinit_with_dentry:  no dentry for
dev=dm-0 ino=459274
Oct  1 18:34:30 zyx-live kernel: inode_doinit_with_dentry:  no dentry for
dev=dm-0 ino=459272
Oct  1 18:34:30 zyx-live kernel: audit(1191281611.630:3): policy loaded
auid=4294967295
Oct  1 18:34:30 zyx-live kernel: audit(1191281629.585:4): avc:  denied  {
relabelfrom } for  pid=1302 c
omm="udevd" name="usbdev1.1_ep81" dev=tmpfs ino=7382
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tc
ontext=system_u:object_r:device_t:s0 tclass=lnk_file
Oct  1 18:34:30 zyx-live kernel: audit(1191281629.587:5): avc:  denied  {
relabelfrom } for  pid=1298 c
omm="udevd" name="usbdev1.1_ep00" dev=tmpfs ino=7363
scontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tc
ontext=system_u:object_r:device_t:s0 tclass=lnk_file


(and on for seemingly all 19 /dev/usbdev* devices)

-dmc/jdog






       
____________________________________________________________________________________
Moody friends. Drama queens. Your life? Nope! - their life, your story. Play Sims Stories
at Yahoo! Games.
http://sims.yahoo.com/