If fixfiles doesn't fix that labeling problem on /etc, do you have a
user defined whose home directory is in /etc/username? I'm not sure if
the genhomedircon that fixed this situation made it into FC3 yet.
If you do have a user with a homedirectory in /etc/username, fix your
file_contexts so that /etc is not labeled wrong and try fixfiles
again.....
Eric
On Wed, 2005-03-30 at 08:36, Stephen Smalley wrote:
> On Wed, 2005-03-30 at 00:56 -0500, Omri Schwarz wrote:
> > Right now I have a machine that is using selinux-policy-targeted-1.17.30-2.90.n
> > oarch.rpm, and I suffer from the same errors:
> >
> > # /usr/sbin/getenforce
> > getenforce: getenforce() failed
> >
> > ]# /usr/sbin/getsebool -a
> > getsebool: booleans.c:48: security_get_boolean_names: Assertion `selinux_mnt'
> > failed.
> > Aborted
> >
> > # cat /selinux/enforce
> > 1
>
> What does 'id' show? What is in your /etc/selinux/config file?
>
> > Mar 30 00:55:15 HOST kernel: audit(1112162115.873:0): avc: denied { search }
> > for pid=6178 exe=/sbin/portmap name=etc dev=hda3 ino=229377
> > scontext=root:system_r:portmap_t tcontext=system_u:object_r:home_root_t
> > tclass=dir
>
> /etc certainly shouldn't be labeled home_root_t. /sbin/fixfiles restore?
