run_init uses /etc/security/initrc_context (was; avc's missing again?)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



After digging a bit, I determined that the problem is that syslog is not running.

I tried to start it manually with 'run_init /etc/rc.d/init.d/syslog start' but got:
Could not open file: /etc/security/initrc_context


Indeed, this file no longer exists (now /etc/selinux/strict/contexts/initrc_context)

Creating a symbolic link 'ln -sf /etc/selinux/strict/contexts/initrc_context /etc/security/initrc_context' did not seem to work, nor did copying the file (and copying context) to /etc/security (get same message).

I'm running policycoreutils-1.13.3.  Is there a newer one?

Bugzilla'ed: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125809

tom
[I'm guessing that updating to selinux-policy-strict-1.13.4-2 may have removed /etc/security/initrc_context. That possible?]


Tom London wrote:

I just noticed that I am no longer getting avc messages in /var/log/messages for my 'run out of the development tree' system.

It is running kernel-2.6.6-1.427, selinux-policy-strict-1.13.4-2 and libselinux-1.13.2-4.
I only get 'blank lines' in /var/log/messages and 'last line repeated 47 times' type messages.


Seems to have started 2 days ago. The same kernel running with the old policy files (policy-1.11.3-3 and libselinux-1.11.4-1) produce avc messages in the log.

The config file for the kernel appears to have AUDIT set to 'y'.....

Anyone seeing this?

  tom




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux