SE Linux installer changes needed - was Re: /etc/ and FC4T3

Jeremy Katz katzj at
Mon May 16 19:35:26 UTC 2005

On Mon, 2005-05-16 at 01:06 +1000, Russell Coker wrote:
> The domain anaconda_t seems to be unused (we should probably just delete 
> anaconda.te).  The installation process runs all initial programs from an 
> initrd (gzip compressed cpio file).  cpio has no support for SE Linux labels 
> so no domain transitions occur and everything runs in kernel_t.  Everything 
> that's not in an initrd is in a cramfs file system (which also has no support 
> for SE Linux labelling).  This means that created files get the type of the 
> directory - etc_t in the case of /etc/

We never used label'ing of things in the initrd when it was an ext2
image.  The loader explicitly sets the exec context before running
anaconda to be system_u:object_r:anaconda_t if policy doesn't fail to
load.  Look in /tmp/anaconda.log (or tty3) for errors about loading the
policy or setting the context.


More information about the fedora-selinux-list mailing list