2005-11-15 05:45:35

by Mukund JB.

[permalink] [raw]
Subject: FC4 Device permission Issues


Dear Kernel Coders,

I have noticed my Flashmedia based block driver not working properly on FC4.
ISSUE is: I am not able to format the Block device file using any of the mkfs* commands.
Where as I am able to format the floopy drive.

But, I am able to mount, read/write & dd the device file.
Udev created the my flashmedia device file with following permission '640'.

I was also successfull in changing the device file permissions to '777' using the the "/etc/udev/rules.d/fm.rules"
file.

But Still I am not able to format the card and it says: permission denied.
But, at the same time I have no such issues with the same driver working on the FC3 dist.

I have noticed audit.log being updated with new error "denied" messages whenever I try to format the card.
Please see the attachment to this mail.

See the logs below as well:
# tail /var/log/audit/audit.log | grep tfa

type=PATH msg=audit(1131719847.291:372708): item=0 name="/dev/tfa3"
inode=9633 dev=00:0d mode=060666 ouid=0 ogid=0 rdev=fc:18
type=AVC msg=audit(1131719847.291:372708): avc: denied { read } for
pid=2849 comm="mkfs.vfat" name=tfa3 dev=tmpfs ino=9633
scontext=root:system_r:fsadm_t tcontext=system_u:object_r:device_t
tclass=blk_file

Regards,
Mukund Jampala


Attachments:
Linux_per_info[1].tar.gz (879.00 B)
Linux_per_info[1].tar.gz

2005-11-15 06:03:52

by Parag Warudkar

[permalink] [raw]
Subject: Re: FC4 Device permission Issues


On Nov 15, 2005, at 12:42 AM, Mukund JB. wrote:

> type=PATH msg=audit(1131719847.291:372708): item=0 name="/dev/tfa3"
> inode=9633 dev=00:0d mode=060666 ouid=0 ogid=0 rdev=fc:18
> type=AVC msg=audit(1131719847.291:372708): avc: denied { read } for
> pid=2849 comm="mkfs.vfat" name=tfa3 dev=tmpfs ino=9633
> scontext=root:system_r:fsadm_t tcontext=system_u:object_r:device_t
> tclass=blk_file

Something to do with SELINUX. Either try turning SELINUX off or
change the policy in use to permissive. (http://fedora.redhat.com/
docs/selinux-faq-fc3/index.html)

BTW Distro specific questions are better handled on the Distro's
mailing list. Fedora has one.

Parag