Hi,
I've just installed a clean Fedora Core development IA-64 (Itanium
systems) on the second HDD of my hp workstation zx6000. During the
installation of selinux-policy-targeted 2.1.7-3, the following messages
are recorded in the logs. I don't know if they're relevant to my problem
with mingetty however (see below):
libsemanage.dbase_policydb_list: out of memory
libsemanage.semanage_exec_prog: Child process /usr/sbin/genhomedircon
did not exit cleanly.
libsemanage.semanage_install_sandbox: genhomedircon returned error code
-1.
semodule: Failed!
Forcing reinstall or trying to install a different policy (e.g. selinux-
policy-mls) gives the same result.
At reboot, I can't log in to my system because of something going wrong
with mingetty. The following line is repeated a huge number of times:
avc: denied { search } for pid=553 comm="mingetty" name="/" dev=tmpfs
ino=977 scontext=system_u:system_r:getty_t:s0
tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
Relabeling the whole file system with touch /.autorelabel or fixfiles
relabel didn't help.
Sure, I can log in in permissive mode. I can't see the message regarding
mingetty, but I'm getting a few other denials. If it can help
understanding what's going wrong, here they are:
avc: denied { execmod } for pid=380 comm="rc.sysinit" name="bash"
dev=dm-0 ino=3371812 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
avc: denied { execmod } for pid=389 comm="awk" name="gawk" dev=dm-0
ino=3371818 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=file
avc: denied { execmod } for pid=409 comm="start_udev" name="bash"
dev=dm-0 ino=3371812 scontext=system_u:system_r:udev_t:s0-s0:c0.c255
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
avc: denied { execmod } for pid=412 comm="awk" name="gawk" dev=dm-0
ino=3371818 scontext=system_u:system_r:udev_t:s0-s0:c0.c255
tcontext=system_u:object_r:bin_t:s0 tclass=file
avc: denied { execmod } for pid=559 comm="sh" name="bash" dev=dm-0
ino=3371812 scontext=system_u:system_r:insmod_t:s0-s0:c0.c255
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
avc: denied { execmod } for pid=1519 comm="S10network" name="bash"
dev=dm-0 ino=3371812 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
avc: denied { execmod } for pid=1607 comm="awk" name="gawk" dev=dm-0
ino=3371818 scontext=system_u:system_r:initrc_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=file
avc: denied { execmod } for pid=1728 comm="dhclient-script"
name="bash" dev=dm-0 ino=3371812 scontext=system_u:system_r:dhcpc_t:s0
tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
avc: denied { execmod } for pid=1741 comm="awk" name="gawk" dev=dm-0
ino=3371818 scontext=system_u:system_r:dhcpc_t:s0
tcontext=system_u:object_r:bin_t:s0 tclass=file
I'm running kernel 2.6.15-1.1826.2.5_FC5 with the following SELinux
components: checkpolicy 1.28-4, libselinux 1.29.4-1, libsepol 1.11.7-1,
libsetrans 0.1.15-1, selinux-policy 2.1.7-3 and selinux-policy-targeted
2.1.7-3 (hope I don't forget one).
If I can try something to help correct these problems on the IA-64
architecture, just let me know.
Thanks,
Émeric
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
