What's in the Fedora Core 2 kernel
Posted Apr 15, 2004 2:30 UTC (Thu) by
jamesm (guest, #2273)
Parent article:
What's in the Fedora Core 2 kernel
The SELinux patch is a workaround which needs to be reworked before submission upstream (which will hopefully happen pretty soon). Some sockets are created by the kernel, e.g. RPC sockets for NFS. Testing in Fedora revealed that they were being labeled with user level contexts, causing incorrect access denials. The current solution involves adding parameter to the socket creation function in the kernel to indicicate that a 'privileged kernel' socket is being created, so that it can be labeled appropriately.
(
Log in to post comments)