[DSE-User] init running as kernel_t problem

[Václav Ovsík]

On Tue, Feb 12, 2008 at 11:35:49PM +0300, Yab Boos wrote:
> Hi,
> 
> I've installed selinux on debian sid machine.
> targeted refpolicy in permissive mode.
> 
> I followed http://wiki.debian.org/SELinux/Setup to set it up.
> Once I created /.autorelabel and rebooted, the system apparentely wasn't 
> relabeled, /.autorelabel was deleted and I've got the error:
> 
> "selinux contexts incorrect, please try relabeling and a reboot (init 
> should not be running as kernel_t)"
>  which seems to be coming from /etc/init.d/selinux-basics script.
> 
> Re-creating /.autorelabel and rebooting didn't help: /.autorelabel was 
> removed and I've got same error.
> 
> Any idea how to solve this?

What version of policycoreutils?
There was a bug in fixfiles script and /etc/init.d/selinux-basics calls
it unfortunately:
/sbin/fixfiles -f -F relabel > /dev/null || true
So the bug can be hidden. (usage information is printed on stdout)

Up to date Sid has policycoreutils 2.0.27-1 and there is fixfiles script
ok.
-- 
Zito