selinux-policy-strict-1.13.9-1, difficulty.
Richard Hally
rhally at mindspring.com
Sat Jun 26 21:46:26 UTC 2004
Tom London wrote:
> I updated to selinux-policy-strict-1.13.9-1 off of the development tree,
> and
> immediately had problems:
> 'su' no longer is accessible
> graphical login/X no longer works.
>
> I bugzilla'ed this
> (https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=126788)
> and attached a copy of the AVCs produced when rebooting with 'enforcing=0'.
>
> tom
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
I'm not having the same problem, having just finished doing a "yum
update" from the /development tree(including the above policy). The
procedure I followed (because of the new policy) was immediately reboot
with "a" selected at the grub menu and adding 'single' to the kernel
line. doing fixfile relabel(delete /tmp? y) and then doing "reboot" at
the prompt. the system comes up in enforcing mode to runlevel 5, I can
do the graphical loging and su -.
There are many more avc denied messages in /var/log/messages than
previously(many having to do with hotplug).
Perhaps trying the above approach to relabeling will at least get you
logged in.
HTH
Richard Hally
More information about the fedora-selinux-list
mailing list