[gentoo-hardened] selinux: avc denials at boot

hey,

i'm having some avc denials at boot which i can't figure out.

avc:  denied  { sys_module } for  pid=150 exe=/sbin/devfsd capability=16
scontext=system_u:system_r:devfsd_t tcontext=system_u:system_r:devfsd_t
tclass=capability

and

avc:  denied  { getattr } for  pid=351 exe=/sbin/reiserfsck
scontext=system_u:system_r:fsadm_t tcontext=system_u:object_r:proc_t
tclass=filesystem

i'm also using propolice, tho i've already uncommented the line in
/etc/security/selinux/src/policy/domains/program/portage.te


cheers.



--
gentoo-hardened@g.o mailing list