bugs of the day

[Bill Nottingham]

I can bugzilla if it's preferred.

policy-1.11.2-6

1) contexts aren't set correctly on install. Jeremy is looking at this.
2) lvm_t can't read sysfs_t. It needs to
3) udev spews all sorts of stuff
  a) it can't run things in /etc/dev.d  (etc_t, shell_exec_t ATM)
  b) can't look in /bin
  c) read symlinks in /bin
  d) various other things because of this
4) init can't write to wtmp (var_log_t)
5) other bits

bootup log and audit2allow attached.

Bill

[Gene Czarcinski]

On Thursday 15 April 2004 16:23, Bill Nottingham wrote:
>  I can bugzilla if it's preferred.
>
>  policy-1.11.2-6
>
>  1) contexts aren't set correctly on install. Jeremy is looking at this.
>  2) lvm_t can't read sysfs_t. It needs to
>  3) udev spews all sorts of stuff
>    a) it can't run things in /etc/dev.d  (etc_t, shell_exec_t ATM)
>    b) can't look in /bin
>    c) read symlinks in /bin
>    d) various other things because of this
>  4) init can't write to wtmp (var_log_t)
>  5) other bits 
At least some of this is already in bugzilla (lvm and udev).

Gene

[Alexandre Oliva]

On Apr 15, 2004, Bill Nottingham <notting(a)redhat.com&gt; wrote:

>  1) contexts aren't set correctly on install. Jeremy is looking at
> this. 
BTW...  I noticed that my kickstart post-install scripts are not run
with a sysadm context, so they can't quite set things up the way I'd
like.  Has this been changed?  If not, is there any point in filing a
bug report, or is the restriction on what post-install can do by
design?

-- 
Alexandre Oliva             http://www.ic.unicamp.br/~oliva/
Red Hat Compiler Engineer   aoliva(a){redhat.com, gcc.gnu.org}
Free Software Evangelist  oliva(a){lsd.ic.unicamp.br, gnu.org}

[Daniel J Walsh]

Alexandre Oliva wrote:

> On Apr 15, 2004, Bill Nottingham <notting(a)redhat.com&gt; wrote:
>
>   
>
> >1) contexts aren't set correctly on install. Jeremy is looking at this.
> >    
> >
>
> BTW...  I noticed that my kickstart post-install scripts are not run
> with a sysadm context, so they can't quite set things up the way I'd
> like.  Has this been changed?  If not, is there any point in filing a
> bug report, or is the restriction on what post-install can do by
> design?
>   
>  
Post a bug.  Post-install should be running in rpm_script_t I think.  
Which currently is unrestriced.

Dan