refpolicy: fix real path for udevd

PATCH Applied [email protected] 3 participants 4 messages Jan 9, 2014 – Jan 10, 2014

lore

Share & tools

lore

[email protected]

author

2014-01-09 02:54 UTC #0 lore raw

cover refpolicy: fix real path for udevd

From: Wenzong Fan <[email protected]>

In Yocto the real path for udevd is /lib/udev/udevd, this patch fixes the init issues like:

udevd[87]: setfilecon /dev/vcsa2 failed: Operation not permitted udevd[89]: setfilecon /dev/fb0 failed: Operation not permitted

The following changes since commit 2209cb5fc21c1ad5a7471897528ed64170f70219:

policy: Create compressed_policy distro feature (2013-12-05 09:03:41 -0500)

are available in the git repository at:

git://git.pokylinux.org/poky-contrib wenzong/fix-udevd-path
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-udevd-path

Wenzong Fan (1):
refpolicy: fix real path for udevd

 .../refpolicy-2.20130424/poky-fc-udevd.patch       |   27 ++++++++++++++++++++
 .../refpolicy/refpolicy_2.20130424.inc             |    1 +
 2 files changed, 28 insertions(+)
 create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-udevd.patch

Signature · 1 line

1.7.9.5

[email protected]

author

2014-01-09 02:54 UTC #1 lore raw

PATCH 1/1 refpolicy: fix real path for udevd

From: Wenzong Fan <[email protected]>

In Yocto the real path for udevd is /lib/udev/udevd, this patch fixes the init issues like:

udevd[87]: setfilecon /dev/vcsa2 failed: Operation not permitted udevd[89]: setfilecon /dev/fb0 failed: Operation not permitted

Signed-off-by Wenzong Fan <[email protected]>

---
 .../refpolicy-2.20130424/poky-fc-udevd.patch       |   27 ++++++++++++++++++++
 .../refpolicy/refpolicy_2.20130424.inc             |    1 +
 2 files changed, 28 insertions(+)
 create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-udevd.patch

recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-udevd.patch new file +27 -0

new file mode 100644
index 0000000..d6540a9
@@ -0,0 +1,27 @@
+From 86fd93b15b97042bcf5ff1b2d1228e7d64b8cfd1 Mon Sep 17 00:00:00 2001
+From: Wenzong Fan <[email protected]>
+Date: Tue, 7 Jan 2014 22:22:00 -0500
+Subject: [PATCH] refpolicy: fix real path for udevd
+
+Upstream-Status: Inappropriate [configuration]
+
+Signed-off-by: Wenzong Fan <[email protected]>
+---
+ policy/modules/system/udev.fc |    1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/policy/modules/system/udev.fc b/policy/modules/system/udev.fc
+index 40928d8..36d471d 100644
+--- a/policy/modules/system/udev.fc
++++ b/policy/modules/system/udev.fc
+@@ -10,6 +10,7 @@
+ /etc/udev/scripts/.+ --	gen_context(system_u:object_r:udev_helper_exec_t,s0)
+ 
+ /lib/udev/udev-acl --	gen_context(system_u:object_r:udev_exec_t,s0)
++/lib/udev/udevd    --	gen_context(system_u:object_r:udev_exec_t,s0)
+ 
+ ifdef(`distro_debian',`
+ /lib/udev/create_static_nodes -- gen_context(system_u:object_r:udev_exec_t,s0)
+-- 
+1.7.9.5
+

recipes-security/refpolicy/refpolicy_2.20130424.inc +1 -0

index 6871813..cfeeaed 100644
@@ -27,6 +27,7 @@ SRC_URI += "file://poky-fc-subs_dist.patch \
             file://poky-fc-ssh.patch \
             file://poky-fc-su.patch \
             file://poky-fc-sysnetwork.patch \
+            file://poky-fc-udevd.patch \
            "
 
 # Specific policy for Poky

Signature · 1 line

1.7.9.5

Pascal Ouyang

2014-01-10 02:00 UTC #2 lore raw

In reply to [email protected]

Quoted 17 lines · 于 14-1-9 上午10:54, [email protected] 写道:

From: Wenzong Fan <[email protected]>
In Yocto the real path for udevd is /lib/udev/udevd, this patch fixes the init issues like:
udevd[87]: setfilecon /dev/vcsa2 failed: Operation not permitted udevd[89]: setfilecon /dev/fb0 failed: Operation not permitted
The following changes since commit 2209cb5fc21c1ad5a7471897528ed64170f70219:
   policy: Create compressed_policy distro feature (2013-12-05 09:03:41 -0500)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib wenzong/fix-udevd-path
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-udevd-path

Quoted 8 lines

Wenzong Fan (1):
refpolicy: fix real path for udevd
  .../refpolicy-2.20130424/poky-fc-udevd.patch       |   27 ++++++++++++++++++++
  .../refpolicy/refpolicy_2.20130424.inc             |    1 +
  2 files changed, 28 insertions(+)
create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-udevd.patch

Tech ok. Thank you. :)

Signature · 1 line

- Pascal

Mark Hatle

Applied

2014-01-10 20:42 UTC #3 lore raw

In reply to [email protected]

merged to master-next

Quoted 25 lines · On 1/8/14, 8:54 PM, [email protected] wrote:

From: Wenzong Fan <[email protected]>
In Yocto the real path for udevd is /lib/udev/udevd, this patch fixes the init issues like:
udevd[87]: setfilecon /dev/vcsa2 failed: Operation not permitted udevd[89]: setfilecon /dev/fb0 failed: Operation not permitted
The following changes since commit 2209cb5fc21c1ad5a7471897528ed64170f70219:
   policy: Create compressed_policy distro feature (2013-12-05 09:03:41 -0500)
are available in the git repository at:
git://git.pokylinux.org/poky-contrib wenzong/fix-udevd-path
http://git.pokylinux.org/cgit.cgi/poky-contrib/log/?h=wenzong/fix-udevd-path
Wenzong Fan (1):
refpolicy: fix real path for udevd
  .../refpolicy-2.20130424/poky-fc-udevd.patch       |   27 ++++++++++++++++++++
  .../refpolicy/refpolicy_2.20130424.inc             |    1 +
  2 files changed, 28 insertions(+)
create mode 100644 recipes-security/refpolicy/refpolicy-2.20130424/poky-fc-udevd.patch