Re: Odd messages during bootup from gdm

[Tony Nelson <tonynelson georgeanelson com>]

At 9:27 PM -0500 5/4/06, Gene Heskett wrote:
>Gene Heskett wrote:
>> Gene Heskett wrote:
>>> Paul Howarth wrote:
>>>>
>>>> I'd suggest relabelling the system before trying anything else. This
>>>> will take a long time so schedule it at an appropriate time.
>>>>
>>>> Set SELinux to permissive mode, reboot, and in the grub menu add
>>>> "autorelabel" to the end of the "kernel" line.
>>>>
>>>> After rebooting you can change SELinux back to enforcing mode if
>>>> that's the setting you had before.
>>>>
>>>> That will probably fix most of the AVC issues you're seeing.
>>>>
>>>> Paul.
>>>>
>>> Ok, thats next, I can answer the rest of this mail after thats done.
>>> Thanks :)
>>>
>> Unforch, the append on the kernel line of grub.conf did nothing.  so I
>> read the manpage again, and "touch /.autorelabel" is the magic spell.
>> Back in a bit...
>>
>Except that 4 reboots later I have not succeeded in getting the relabel
>to work.  I've tried SELINUX=disabled and SELINUX=permissive in
>/etc/selinux/config while leaving the SELINUXTYPE=targeted setting.
>
>So what actually is the magic incantation that will make this work?

touch /.autorelabel
reboot
edit grub command line, appending "enforcing=0"
continue booting
wait

SELinux must be active but not enforcing for it to relabel.
____________________________________________________________________
TonyN.:'                       <mailto:tonynelson georgeanelson com>
      '                              <http://www.georgeanelson.com/>