Smart and SELinux (Fedora 7)

Axel Thimm Axel.Thimm at ATrpms.net
Thu Aug 9 16:55:05 PDT 2007


On Fri, Aug 10, 2007 at 12:45:24AM +0200, Frode Petersen wrote:
> Gustavo Niemeyer wrote:
> >Greetings,
> >
> >>Does this do any harm to the data used by Smart or damage any rpms? Is
> >>there a way to avoid this behaviour?
> >(...)
> >>SELinux is preventing the /sbin/depmod from using potentially mislabeled
> >>files (/tmp/tmpzACEzq-smart-rpm-out.txt (deleted)).
> >
> >This looks bizarre to me.  I have no idea about what depmod is trying to
> >do with that text file.
> 
> I noticed later that an AVC-denial occured as smart was closing down 
> (writing the cache). I can't say whether that is the case at all times, 
> though.
> 
> I haven't NOTICED any problems, so I guess it's probably harmless.

If you're in permissive mode it is not an issue, and if it's
enforcing, but "just" not depmoding, but you don't immediately load
the kernel module in question you're not noticing either.

But a related bugzilla entry on selinux policy has been resolved
recently (selinux-policy >= 2.6.4-30):

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=243580

Make sure you have the above selinux-policy update and if you still
get the messages please report to the bugzilla given above, thanks!
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.labix.org/pipermail/smart-labix.org/attachments/20070810/1ae44f5c/attachment-0007.pgp>


More information about the Smart mailing list