Re: [gentoo-hardened] selinux + pty problem

[Chris PeBenito]

Also make sure that the directory /dev/pts exists.  It recently came to
my attention that the current set of stages don't have this directory,
causing devpts to not mount when booting.

On Sat, 2004-04-10 at 06:24, Joshua Brindle wrote:
> Per the instructions for selinux use devpts and a standard (non devfs) /dev
>
> see
> http://www.gentoo.org/proj/en/hardened/selinux/selinux-x86-install.xml#doc_chap15
> for the fstab entries required by selinux
>
> Joshua Brindle
>
> nixnut wrote:
>
> > G'day all,
> >
> > I'm having some problems with selinux and devfs. selinux does not support devfs but without devfs normal users
> > can't start xterms.
> >
> > I've tried a number of kernels (all 2.6.4-hardened-r3) with different configurations.
> > All kernels without devfs result in the pty problem:
> >    xterm: Error 32, errno 2: No such file or directory
> >    Reason: get_pty: not enough ptys
> >
> > selinux enabled kernels with devfs result in a large number of "avc: denied .." messages. If I understand correctly
> > the dynamically created devices can't be labelled properly.
> >
> > The solution for non-selinux systems is obviously enabling devfs (as mentioned in a number of threads on
> > forums.gentoo), but for selinux creates the other problem.
> > Any ideas on how to have both selinux and the usual use of pty's?
> >
> > regards,
> > nixnut
> >
> > www.lycosmail.nl - Gratis 15 MB mailbox - Nu ook hotmail via Lycos Mail!
> >
> >
> >
> >
> >
> > ------------------------------------------------------------------------
> >
> > --
> > gentoo-hardened@g.o mailing list
>
>
> --
> gentoo-hardened@g.o mailing list
-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243