udev_t and alsa_var_lib_t....

["Tom London" <selinux gmail com>]

Running latest Rawhide.

Get these in /var/log/messages before auditd starts:

Sep 21 14:03:47 localhost kernel: audit(1190408616.016:4): avc:
denied  { search } for  pid=1835 comm="salsa" name="alsa" dev=dm-0
ino=688427 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:alsa_var_lib_t:s0 tclass=dir
Sep 21 14:03:47 localhost kernel: audit(1190408616.016:5): avc:
denied  { search } for  pid=1834 comm="salsa" name="alsa" dev=dm-0
ino=688427 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:alsa_var_lib_t:s0 tclass=dir
Sep 21 14:03:47 localhost kernel: audit(1190408616.016:6): avc:
denied  { search } for  pid=1837 comm="salsa" name="alsa" dev=dm-0
ino=688427 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:alsa_var_lib_t:s0 tclass=dir
Sep 21 14:03:47 localhost kernel: audit(1190408616.016:7): avc:
denied  { search } for  pid=1836 comm="salsa" name="alsa" dev=dm-0
ino=688427 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:alsa_var_lib_t:s0 tclass=dir

Believe this is from /etc/udev/rules/90-alsa.rules:
SUBSYSTEM=="sound", KERNEL=="controlC*"   RUN+="/sbin/salsa"
SUBSYSTEM=="sound", KERNEL=="pcm*"        RUN+="/sbin/salsa"

Appears to be trying to read /var/lib/alsa/asound.state and restoring
audio state to previously set values.

tom
-- 
Tom London