Is this an selinux system?

Dominick Grift domg472 at gmail.com
Wed Dec 2 14:05:46 UTC 2009


On Wed, Dec 02, 2009 at 01:41:28PM +0000, Moray Henderson wrote:
> I'm trying to solve a problem on an old EL4 box.
> 
> /etc/sysconfig/selinux says:
> SELINUX=enforcing
> SELINUXTYPE=targeted
> 
> sestatus says:
> SELinux status:         enabled
> SELinuxfs mount:        /selinux
> Current mode:           enforcing
> Mode from config file:  enforcing
> Policy version:         18
> Policy from config file:targeted
> 
> seinfo and sesearch say:
> Default policy search failed: This is not an selinux system.
> 
> It clearly is an SELinux system - I see SELinux initializing during
> boot, it has an /selinux file system, files and processes have contexts,
> I get avc errors when I violate policy.  
> 
> What could be confusing seinfo and sesearch?

Might be related to the nature of the policy, which is monolithic.

> 
> # ls -lZ /etc/selinux/targeted/policy
> -rw-r--r--  root     root     system_u:object_r:policy_config_t
> policy.18
> # rpm -qf /usr/bin/seinfo /usr/sbin/sestatus
> setools-1.5.1-5
> policycoreutils-1.18.1-4.7
> # rpm -V setools policycoreutils
> # 
> 
> 
> Moray.
> "To err is human.  To purr, feline."
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20091202/e928b29e/attachment.sig>


More information about the fedora-selinux-list mailing list