xfs socket startup fails with strict policy

[Leonard den Ottolander]

Hi,

I wrote:
> I'm seeing the following at startup. I have to boot to runlevel 3
> because X won't start since it "could not open default font 'fixed'".
> There is no socket for xfs (7100) although service xfs is reported
> running.

The fact that xfs is not listening on port 7100 is of course expected
behaviour. The directory /tmp/.font-unix seems to have the wrong
security context though. Did fixfiles miss this temporary directory?

> Aug 25 23:27:36 k6-joy xfs: xfs startup succeeded
> Aug 25 23:27:36 k6-joy kernel: audit(1093469256.744:0): avc:  denied  {
> getattr } for  pid=2171 exe=/usr/X11R6/bin/xfs path=/tmp/.font-unix
> dev=hda6 ino=425186 scontext=system_u:system_r:xfs_t
> tcontext=system_u:object_r:initrc_tmp_t tclass=dir

[root at k6-joy tmp]# ls -aZd .font-unix
drwxrwxrwt  root     root     system_u:object_r:initrc_tmp_t  
.font-unix

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research