SELinux Reset

Justin P. Mattock justinmattock at gmail.com
Fri Aug 7 22:56:33 UTC 2009


Peter Joseph wrote:
> This is a fresh install , Kernel Linux 2.6.29.4-167.fc11.i586
> ___________________________________________________
> # semanage login -l
>
> Login Name                SELinux User              MLS/MCS Range
>
> __default__               unconfined_u              s0-s0:c0.c1023
> root                      unconfined_u              s0-s0:c0.c1023
> system_u                  system_u                  s0-s0:c0.c1023
> ___________________________________________________
> # module -l | grep unconfined
>
> unconfined	3.0.1
> unconfineduser	1.0.0
> ___________________________________________________
> Using enforcing=0 results in inability to log in.  "Could not acquire name
> on session bus"
> Looked into  /etc/dbus-1/*, did not recognized anything as being out of
> ordinary that would need updating (what do I know?).
>
> I am thinking about re-installation and then try to duplicate the error.
> There should be a way of fixing this.
>
>
> Daniel J Walsh wrote:
>    
>> On 08/06/2009 06:21 PM, Peter Joseph wrote:
>>      
>>> While experimenting with SELinux, I finally managed to lock myself out of
>>> the.....
>>>        
>> I have no idea what is going on on your system.  I would figure you either
>> have a problem with labeling, or you
>> have a problem upgrading from an older version of SELInux.
>>
>> Did you upgrade or was this a fresh install?
>> If an Upgrade, what version to what version
>>
>> Also what does
>>
>> # semanage login -l
>> show?
>> # semodule -l | grep unconfined
>> Show?
>>
>> --
>> fedora-selinux-list mailing list
>> fedora-selinux-list at redhat.com
>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>>
>>
>>      
>
>    
Hmm, this should not happen on a fresh
fedora 11 install.
  from just looking, it sounds
like the dbus user is not correct. i.g. on my system
I have built dbus to have a user name.
if  I look in /etc/group
it says
messagebus:x:111:myname
distros I think do this differently.

Justin P. Mattock




More information about the fedora-selinux-list mailing list