how to allow devfsd to create symlinks?

[`VL]

I have in logs such messages:

Jun 6 21:02:32 serv grsec: (root:U:/sbin/devfsd) denied symlink from vcc/12 to /dev/vcs12 by /sbin/devfsd[devfsd:30752] uid/euid:0/0 gid/egid:0/0, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0
Jun 6 21:02:32 serv grsec: (root:U:/sbin/devfsd) denied symlink from vcc/a12 to /dev/vcsa12 by /sbin/devfsd[devfsd:30752] uid/euid:0/0 gid/egid:0/0, parent /sbin/init[init:1] uid/euid:0/0 gid/egid:0/0

ACL for devfsd is:

subject /sbin/devfsd oX {
/usr/share/zoneinfo r
/sbin/insmod x
/lib/dev-state w
/lib rx
/dev/initctl rw
/dev/mem h
/dev/kmem h
/dev/port h
/dev w
/dev/log rw
/dev/vc w
/dev/vcs* w
/dev/vcsa* w
/ h
-CAP_ALL
+CAP_CHOWN
+CAP_FOWNER
+CAP_FSETID
+CAP_MKNOD
bind disabled
connect disabled
}

[spender]

You need the "c" flag to create files, as noted in the default policy file.

-Brad