Hi!

What is the best way to give a program(fetch3600) a r/rw access to ttyS0 in SELinux. Program is used to read live data from device and display weatherdata on webpage.


in /dev/ttyS0
crw-rw-rw- 1 root uucp 4, 64 Dec 13 23:34 /dev/ttyS0

in /var/log/messages:
Dec 13 20:20:29 xxxxxxx kernel: audit(1166034029.818:12): avc: denied { read } for pid=5155 comm="fetch3600" name="[24846]" dev=eventpollfs ino=24846 scontext=root:system_r:httpd_sys_script_t:s0 tcontext=root:system_r:httpd_t:s0 tclass=file

Dec 13 20:20:30 xxxxxxx kernel: audit(1166034030.250:13): avc: denied { read write } for pid=5155 comm="fetch3600" name="ttyS0" dev=tmpfs ino=802 scontext=root:system_r:httpd_sys_script_t:s0 tcontext=system_ubject_r:tty_device_t:s0 tclass=chr_file

Run audit2allow on the log that contains your audit messages, add rules to local policy, then "make load", then test. Retry until no more avc messages.