devfs
[Top] [All Lists]

Re: NSA SE enabled devfsd

To: Russell Coker <russell@xxxxxxxxxxxx>
Subject: Re: NSA SE enabled devfsd
From: Richard Gooch <rgooch@xxxxxxxxxxxxxxx>
Date: Wed, 6 Mar 2002 09:39:23 -0700
Cc: SE Linux <selinux@xxxxxxxxxxxxx>, devfs@xxxxxxxxxxx
In-reply-to: <20020306121639.699FC2158@xxxxxxxxxxxxxxxxx>
References: <20020306121639.699FC2158@xxxxxxxxxxxxxxxxx>
Sender: owner-devfs@xxxxxxxxxxx
Russell Coker writes:
> On Wed, 6 Mar 2002 00:23, Russell Coker wrote:
> > I have hacked support for SE Linux into devfsd.
> 
> I have found one problem with my current code.  devfsd wants to
> re-apply it's permissions to device nodes whenever it's restarted
> and whenever you do "killall -1 devfsd" to tell it to reload it's
> config.

I'm open to (clean) suggestions on what to do about this. Perhaps a
separate signal to reload the config file but don't generate the
synthetic events?

But before I make such a change, tell me why you're reloading the
config file, but don't want to change permissions? Normally, you just
send SIGHUP when /var is mounted (if that's where your permissions
have been saved).

> Also this is not an issue that is restricted to SE Linux.  Currently
> if I run "killall -1 devfsd" it will be equivalent to "mesg n" for
> all users!

But in general devfsd should be configured to *not* touch permissions
for PTY's, so this shouldn't be a problem. What are you doing?

                                Regards,

                                        Richard....
Permanent: rgooch@xxxxxxxxxxxxx
Current:   rgooch@xxxxxxxxxxxxxxx

<Prev in Thread] Current Thread [Next in Thread>