Everything got broken. selinux-policy-targeted-1.17.30-2.90

Stephen Smalley sds at tycho.nsa.gov
Wed Mar 30 13:36:55 UTC 2005


On Wed, 2005-03-30 at 00:56 -0500, Omri Schwarz wrote:
> Right now I have a machine that is using selinux-policy-targeted-1.17.30-2.90.n
> oarch.rpm, and I suffer from the same errors:
> 
> # /usr/sbin/getenforce
> getenforce:  getenforce() failed
> 
> ]# /usr/sbin/getsebool -a
> getsebool: booleans.c:48: security_get_boolean_names: Assertion `selinux_mnt' 
> failed.
> Aborted
> 
> # cat /selinux/enforce
> 1

What does 'id' show?  What is in your /etc/selinux/config file?

> Mar 30 00:55:15 HOST kernel: audit(1112162115.873:0): avc:  denied  { search } 
> for  pid=6178 exe=/sbin/portmap name=etc dev=hda3 ino=229377 
> scontext=root:system_r:portmap_t tcontext=system_u:object_r:home_root_t 
> tclass=dir

/etc certainly shouldn't be labeled home_root_t. /sbin/fixfiles restore?

-- 
Stephen Smalley <sds at tycho.nsa.gov>
National Security Agency




More information about the fedora-selinux-list mailing list