Does mcs work on rawhide correctly?

KaiGai Kohei kaigai at kaigai.gr.jp
Sun Jan 25 04:09:03 UTC 2009


I found a strange behavior with selinux-policy-3.6.3-8.fc11.noarch.

[root at masu ~]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted
[root at masu ~]# touch aaa
[root at masu ~]# ls -Z aaa
-rw-r--r--  root root unconfined_u:object_r:admin_home_t:s0 aaa
[root at masu ~]# id -Z
unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c31
[root at masu ~]# chcon -l s0:c0 aaa
chcon: failed to change context of `aaa' to `unconfined_u:object_r:admin_home_t:s0:c0': Operation not permitted

Why "s0-s0:c0.c31" cannot change the context from "s0" to "s0:c0"?

I could reproduce the matter after "semodule -B".

Is there anyone who can reproduce the matter?
-- 
KaiGai Kohei <kaigai at kaigai.gr.jp>




More information about the fedora-selinux-list mailing list