Everything got broken. selinux-policy-targeted-1.17.30-2.90

[Eric Paris]

If fixfiles doesn't fix that labeling problem on /etc, do you have a
user defined whose home directory is in /etc/username?  I'm not sure if
the genhomedircon that fixed this situation made it into FC3 yet.  

If you do have a user with a homedirectory in /etc/username, fix your
file_contexts so that /etc is not labeled wrong and try fixfiles
again.....

Eric

On Wed, 2005-03-30 at 08:36, Stephen Smalley wrote:
> On Wed, 2005-03-30 at 00:56 -0500, Omri Schwarz wrote:
> > Right now I have a machine that is using selinux-policy-targeted-1.17.30-2.90.n
> > oarch.rpm, and I suffer from the same errors:
> > 
> > # /usr/sbin/getenforce
> > getenforce:  getenforce() failed
> > 
> > ]# /usr/sbin/getsebool -a
> > getsebool: booleans.c:48: security_get_boolean_names: Assertion `selinux_mnt' 
> > failed.
> > Aborted
> > 
> > # cat /selinux/enforce
> > 1
> 
> What does 'id' show?  What is in your /etc/selinux/config file?
> 
> > Mar 30 00:55:15 HOST kernel: audit(1112162115.873:0): avc:  denied  { search } 
> > for  pid=6178 exe=/sbin/portmap name=etc dev=hda3 ino=229377 
> > scontext=root:system_r:portmap_t tcontext=system_u:object_r:home_root_t 
> > tclass=dir
> 
> /etc certainly shouldn't be labeled home_root_t. /sbin/fixfiles restore?