kernel Oops from policy
r_dir_file(insmod_t, debugfs_t)
The above needs to be added to the strict policy to prevent a kernel Oops on
boot with the usb_uhci driver. Below is the kernel message log from before I
added the above to one of my systems. I only really needed to allow search
access to the directory, but I decided to allow full read access to the
directory and any files under it just in case.
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=166327
Above is a bugzilla entry.
USB Universal Host Controller Interface driver v2.2
SELinux: initialized (dev debugfs, type debugfs), uses genfs_contexts
audit(1124441960.362:2): avc: denied { search } for pid=958 comm="modprobe"
n
ame="/" dev=debugfs ino=3962 scontext=system_u:system_r:insmod_t
tcontext=system_u:object_r:debugfs_t tclass=dir
Unable to handle kernel NULL pointer dereference at virtual address 00000013
printing eip:
c01e1d48
*pde = 00000000
Oops: 0000 [#1]
Modules linked in: uhci_hcd i2c_i801 i2c_core snd_intel8x0 snd_ac97_codec
snd_seq_dummy snd_seq_oss snd_seq_midi_event snd_seq snd_seq_device
snd_pcm_oss snd_mixer_oss snd_pcm snd_timer snd soundcore snd_page_alloc e100
mii flo
ppy dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod
CPU: 0
EIP: 0060:[<c01e1d48>] Not tainted VLI
EFLAGS: 00010286 (2.6.12-1.1398_FC4)
EIP is at debugfs_mknod+0x1b/0x47
eax: ffffffef ebx: fffffff3 ecx: 00006468 edx: d72ac578
esi: d591ecb0 edi: d6939f6c ebp: d89e6aca esp: d6939f3c
ds: 007b es: 007b ss: 0068
Process modprobe (pid: 958, threadinfo=d6939000 task=d6cf4000)
Stack: d72ac71c c01e1d8f 00000000 d72ac71c c01e1ecf 41ed001c 00000000 000041ed
00000000 d89e6aca c01e1f4c d6939f6c fffffff3 ffffffed c0000000 d89e9700
d6939000 c01e1fc4 00000000 00000000 d883603c d89e7108 d6939000 c0000000
Call Trace:
[<c01e1d8f>] debugfs_mkdir+0x1b/0x28
[<c01e1ecf>] debugfs_create_by_name+0x91/0xbe
[<c01e1f4c>] debugfs_create_file+0x50/0xaa
[<c01e1fc4>] debugfs_create_dir+0x1e/0x22
[<d883603c>] uhci_hcd_init+0x3c/0xea [uhci_hcd]
[<c014844c>] sys_init_module+0xca/0x1c4
[<c0103a51>] syscall_call+0x7/0xb
Code: 00 00 60 12 3d c0 89 d8 83 c4 08 5b 5e 5f 5d c3 53 89 d3 89 ca 8b 4c 24
08 8b 80 dc 00 00 00 e8 2f ff ff ff 89 c2 b8 ef ff ff ff <8b> 4b 20 85 c9 74
02 5b c3 b0 ff 85 d2 74 f8 89 d8 e8 a7 84 fb
<6>ACPI: Power Button (FF) [PWRF]