On Mon, 2005-05-16 at 01:06 +1000, Russell Coker wrote: > The domain anaconda_t seems to be unused (we should probably just delete > anaconda.te). The installation process runs all initial programs from an > initrd (gzip compressed cpio file). cpio has no support for SE Linux labels > so no domain transitions occur and everything runs in kernel_t. Everything > that's not in an initrd is in a cramfs file system (which also has no support > for SE Linux labelling). This means that created files get the type of the > directory - etc_t in the case of /etc/ld.so.cache. We never used label'ing of things in the initrd when it was an ext2 image. The loader explicitly sets the exec context before running anaconda to be system_u:object_r:anaconda_t if policy doesn't fail to load. Look in /tmp/anaconda.log (or tty3) for errors about loading the policy or setting the context. Jeremy -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-devel-list
