[refpolicy] One more fix for mount_t: able to request loading kernel module

HarryCiao harrytaurus2002 at hotmail.com
Mon Dec 20 21:53:18 CST 2010



Make the mount domain able to request kernel to load a kernel module.
Otherwise the binfmt_misc kernel module won't be properly loaded
during system booting up.
 
type=1400 audit(1292850971.104:4): avc: denied { module_request } for pid=87 comm="mount" kmod="devtmpfs" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
 
type=1400 audit(1292851024.844:13): avc: denied { module_request } for pid=409 comm="mount" kmod="binfmt_misc" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-mount_t-request-kernel-module.patch
Type: application/octet-stream
Size: 1542 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.obj 


More information about the refpolicy mailing list