Make the mount domain able to request kernel to load a kernel module.
Otherwise the binfmt_misc kernel module won't be properly loaded
during system booting up.
type=1400 audit(1292850971.104:4): avc: denied { module_request } for pid=87 comm="mount" kmod="devtmpfs" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
type=1400 audit(1292851024.844:13): avc: denied { module_request } for pid=409 comm="mount" kmod="binfmt_misc" scontext=system_u:system_r:mount_t:s0-s15:c0.c1023 tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-mount_t-request-kernel-module.patch
Type: application/octet-stream
Size: 1542 bytes
Desc: not available
Url : http://oss.tresys.com/pipermail/refpolicy/attachments/20101221/2943044f/attachment.obj
On 12/20/10 22:53, HarryCiao wrote:
> Make the mount domain able to request kernel to load a kernel module.
> Otherwise the binfmt_misc kernel module won't be properly loaded
> during system booting up.
Merged.
> type=1400 audit(1292850971.104:4): avc: denied { module_request } for
> pid=87 comm="mount" kmod="devtmpfs"
> scontext=system_u:system_r:mount_t:s0-s15:c0.c1023
> tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
>
> type=1400 audit(1292851024.844:13): avc: denied { module_request } for
> pid=409 comm="mount" kmod="binfmt_misc"
> scontext=system_u:system_r:mount_t:s0-s15:c0.c1023
> tcontext=system_u:system_r:kernel_t:s15:c0.c1023 tclass=system
--
Chris PeBenito
Tresys Technology, LLC
http://www.tresys.com | oss.tresys.com