| Summary: | bootmisc wants to write to /var/log | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Sven Vermeulen (RETIRED) <swift> |
| Component: | Hardened | Assignee: | Sven Vermeulen (RETIRED) <swift> |
| Status: | VERIFIED FIXED | ||
| Severity: | normal | CC: | selinux |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Bug Depends on: | |||
| Bug Blocks: | 293742 | ||
Bug originally reported by Nick Kossifidis (bug #293742) In hardened-dev overlay Moved to main portage tree, ~arch'ed. stabilized. |
In the bootmisc code, the script wants to write to /var/log to dump the output of "dmesg" into a /var/log/dmesg file. SELinux might hinder this, as initrc_t does not hold the proper privileges on var_log_t to do so. { create } comm="mkdir" name=".test.1390" scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:var_log_t tclass=dir { rmdir } comm="rmdir" name=".test.1390" dev=vda4 ino=16285 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:var_log_t tclass=dir Reproducible: Always