selinux is still not allowing mknod to do its job.
I have to manually create the device node every boot
[root@localhost ~]# mknod -m 600 /dev/slamr0 c 242 0 [1]+ Done gedit /boot/grub/grub.conf [root@localhost ~]# modprobe ungrab-winmodem [root@localhost ~]# modprobe slamr [root@localhost ~]# slmodemd -c USA /dev/slamr0 & [1] 2709 [root@localhost ~]# SmartLink Soft Modem: version 2.9.11 Jun 4 2007 00:14:21 symbolic link `/dev/ttySL0' -> `/dev/pts/1' created. modem `slamr0' created. TTY is `/dev/pts/1' Use `/dev/ttySL0' as modem device, Ctrl+C for termination.
audit(1181023411.825:4): avc: denied { mknod } for pid=673 comm="mknod" capability=27 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability
[root@localhost ~]# grep insmod /var/log/audit/audit.log | audit2allow -M myinsmod ******************** IMPORTANT *********************** To make this policy package active, execute:
semodule -i myinsmod.pp
[root@localhost ~]# semodule -i myinsmod.pp
What should I try now?
Regards,
Antonio
____________________________________________________________________________________ Get the Yahoo! toolbar and be alerted to new email wherever you're surfing. http://new.toolbar.yahoo.com/toolbar/features/mail/index.php
Antonio Olivares wrote:
selinux is still not allowing mknod to do its job.
I have to manually create the device node every boot
[root@localhost ~]# mknod -m 600 /dev/slamr0 c 242 0 [1]+ Done gedit /boot/grub/grub.conf [root@localhost ~]# modprobe ungrab-winmodem [root@localhost ~]# modprobe slamr [root@localhost ~]# slmodemd -c USA /dev/slamr0 & [1] 2709 [root@localhost ~]# SmartLink Soft Modem: version 2.9.11 Jun 4 2007 00:14:21 symbolic link `/dev/ttySL0' -> `/dev/pts/1' created. modem `slamr0' created. TTY is `/dev/pts/1' Use `/dev/ttySL0' as modem device, Ctrl+C for termination.
audit(1181023411.825:4): avc: denied { mknod } for pid=673 comm="mknod" capability=27 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability
[root@localhost ~]# grep insmod /var/log/audit/audit.log | audit2allow -M myinsmod ******************** IMPORTANT *********************** To make this policy package active, execute:
semodule -i myinsmod.pp
[root@localhost ~]# semodule -i myinsmod.pp
What should I try now?
Regards,
Antonio
Are you seeing other avc messages? Please attach the myinsmod.te and your audit.log
Get the Yahoo! toolbar and be alerted to new email wherever you're surfing. http://new.toolbar.yahoo.com/toolbar/features/mail/index.php
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
selinux@lists.fedoraproject.org