Re: mknod denials, avcs from dmesg please help

[Daniel J Walsh <dwalsh redhat com>]

Ok the avc

audit(1180944508.786:4): avc:  denied  { write } for  pid=655 comm="mknod" name="/" dev=tmpfs ino=752 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=dir

Looks like the interesting one.  The rest were caused by you doing a restorecon -R -v /, or the original mislabeling of /root.

What node is insmod trying to create in /dev?  Do  you have any idea what is going on here?

This is very strange that you would get this avc since insmod_t is supposed to be unconfined in FC-7

Also