Hi, I'm using Fedora Core 2 with SELinux, and I was wondering if there is an official place to submit (possible) policy changes. I have run across a couple things that might need to be changed, and I would like to submit them for the next versions of the policy packages. I can do bugzilla if thats the right place for these things.
The main things I'm looking at right now are for dm-crypt. It seems that there might not be correct labeling to support device mapper.
hda6 is the / partition, where the loopback file is (I'm using losetup to setup the loop, and dm-crypt to encrypt, which is then mounted as a user home directory)
audit(1086192065.154:0): avc: denied { read } for pid=2844 exe=/sbin/ldconfig name=libdevmapper.so.1.00 dev=hda6 ino=278879 scontext=root:sysadm_r:ldconfig_t tcontext=system_u:object_r:usr_t tclass=file audit(1086192065.179:0): avc: denied { read } for pid=2844 exe=/sbin/ldconfig name=libdevmapper.so dev=hda6 ino=278880 scontext=root:sysadm_r:ldconfig_t tcontext=system_u:object_r:usr_t tclass=lnk_file