PDA

View Full Version : SELinux disabled via Kernel update BZ519653


SlowJet
1st September 2009, 09:13 AM
https://bugzilla.redhat.com/show_bug.cgi?id=519653

This has been going on from almost the begining of Alpha-rc.

It is a dracut bug

Anyway, the initrd gets built at about 15MB vs. 3MB
and prevents the SELinux policy from loading by chroot.
It can not be fixed without mkintrd -f /boot/initrd...img 2.6.31-0..as shown in the bug report.

then
touch /.autorelabel
reboot

The selinux-policy will be loaded
The file systems relabeled
an autoreboot may occur

The system boots as you have your
/etc/selinux/conf defined

Determine with
sestatus
turn it on with
setenforce 1
make it permenent with semanage



SJ

AdamW
1st September 2009, 07:42 PM
I'm booting with kernel 2.6.31-0.190.rc8.fc12.x86_64 and an initrd-generic (so Dracut-built) which matches it, and SELinux seems to be working:

[adamw@adam ~]$ sestatus
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: enforcing
Mode from config file: enforcing
Policy version: 24
Policy from config file: targeted