295891 – udevd is denied access to /lib64/udev/firmware.sh

Bug 295891 - udevd is denied access to /lib64/udev/firmware.sh

Summary: udevd is denied access to /lib64/udev/firmware.sh

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Hardened (show other bugs)
Hardware:	AMD64 Linux

Importance:	High normal (vote)
Assignee:	SE Linux Bugs

URL:
Whiteboard:
Keywords:

Duplicates (1):	295902 (view as bug list)
Depends on:
Blocks:

Reported:	2009-12-05 19:06 UTC by Marcin Szamotulski
Modified:	2009-12-16 02:03 UTC (History)
CC List:	0 users

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marcin Szamotulski 2009-12-05 19:06:04 UTC

I got the following error with selinux:
type=1400 audit(1260036606.378:44): avc:  denied  { execute_no_trans } for  pid=2527 comm="udevd" path="/lib64/udev/firmware.s" dev=sda1 ino=582645 scontext=system_u:system_r:udev_t tcontext=system_u:object_r:lib_t tclass=file

Reproducible: Always

Actual Results:  
with the kernel option enforce=1 system can not start

Expected Results:  
system starts corectly

Comment 1 Jory A. Pratt gentoo-dev

2009-12-05 21:01:50 UTC

*** Bug 295902 has been marked as a duplicate of this bug. ***

Comment 2 Chris PeBenito (RETIRED) gentoo-dev

2009-12-16 02:03:16 UTC

Should be fixed in sec-policy/selinux-base-policy-2.20090814.  Please reopen if this is not the case.