From: guido@trentalancia.com (Guido Trentalancia)
Date: Sat, 19 Feb 2011 06:07:03 +0100
Subject: [refpolicy] [patch 1/1] dmesg: reads /proc/version
In-Reply-To: <4D5E97A6.1040603@redhat.com>
References: <4D5E97A6.1040603@redhat.com>
Message-ID: <1298092023.3101.48.camel@tesla.lan>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

Hello Miroslav !

On Fri, 18/02/2011 at 16.00 +0000, Miroslav Grepl wrote:
> http://mgrepl.fedorapeople.org/F15/admin_dmesg.patch
> 
>      * dmesg reads /proc/version
>      * dmesg needs to access to abrt files

I couldn't find any reference in the source code for dmesg from
util-linux-ng versions 2.18 and 2.19 about the fact that "dmesg
reads /proc/version".

Nor I have any indication from the audit logs on the test system I am
running that dmesg ever required that permission.

Only mount needs to stat() /proc/version.

So, where did you get that from ?

And I am not using abrt, but to be honest, I could not find any
reference to abrt files access either.

Regards,

Guido