[DSE-User] init running as kernel_t problem

Russell Coker russell at coker.com.au
Tue Feb 12 22:41:42 UTC 2008


On Wednesday 13 February 2008 08:01, Erich Schubert <erich at debian.org> wrote:
> Just two things that come to my mind:
> 1. Do you have a valid policy installed?

The policy is valid enough to have kernel_t defined.

> (i.e. did semodule succeed, is the configuration file for choosing the
> policy correct?)

That's always a good thing to check, but the domain init_t will be used 
for /sbin/init in both Strict and Targeted policies.

> 2. Does your filesystem support xattr labels?
> (ext2/3 does, I don't know which of the others do, you'll need to look
> it up. There were reiserfs issues at some point, but I figure that
> probably was resolved in the meantime. I guess xfs is okay, too. But I
> do not KNOW, so you'll really have to look it up / test it.

XFS worked last time I tested it.  I've got a server running with XFS (but I 
haven't upgraded it's kernel for a while).

ReiserFS didn't work last time I tested it.

The first thing to do is to run "ls -lZ /sbin/init".  Then we'll have a better 
idea of what went wrong.

> Try a manual relabel via fixfiles.

Yes, "fixfiles relabel" is a good idea.

-- 
russell at coker.com.au
http://etbe.coker.com.au/          My Blog

http://www.coker.com.au/sponsorship.html Sponsoring Free Software development



More information about the Selinux-user mailing list