Hi Dan,
We are compiling our policies on the new OS and then installing it. All
the policies install fine.
When the box comes up after firstboot following the install that is when
we see this error in the
D message buffer.
Here are our current entries in the /etc/fstab file
#
UUID=0325a3b6-4c4d-468d-8d41-218a625104af / ext4
defaults,noatime 1 1
UUID=9da9fcd3-127a-4cfd-8354-bda6b7b12b39 /common ext4
defaults 1 2
UUID=43b41e10-8147-4e6b-95fd-663b904a248a /grub ext4
defaults 1 2
UUID=a0e34fd5-d4a8-48e0-a1e8-c58b38880dd6 /partB ext4
defaults 1 0
UUID=41d14b91-c85d-4a69-8c35-df8213a0647c swap swap
defaults 0 0
tmpfs /dev/shm tmpfs defaults 0 0
devpts /dev/pts devpts gid=5,mode=620 0 0
sysfs /sys sysfs defaults 0 0
proc /proc proc defaults 0 0
none /var/log/ramfs/cm/trace/ccm/sdi dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=ccm,dest=/var/log/active/c
m/trace/ccm/sdi 0 0
none /var/log/ramfs/cm/trace/ccm/sdl dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=ccm,dest=/var/log/active/c
m/trace/ccm/sdl 0 0
none /var/log/ramfs/cm/trace/ccm/calllogs dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=ccm,dest=/var/log/active/c
m/trace/ccm/calllogs 0 0
none /var/log/ramfs/cm/trace/ccm/dntrace dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=ccm,dest=/var/log/active/c
m/trace/ccm/dntrace 0 0
none /var/log/ramfs/cm/trace/lbm/sdl dbcfs
noauto,uid=0,gid=506,mode=0770,size=128M,wproc=lbm,dest=/var/log/active/cm/
trace/lbm/sdl 0 0
none /var/log/ramfs/cm/trace/cti/sdi dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=CTIManager,dest=/var/log/a
ctive/cm/trace/cti/sdi 0 0
none /var/log/ramfs/cm/trace/cti/sdl dbcfs
noauto,uid=513,gid=506,mode=0770,size=128M,wproc=CTIManager,dest=/var/log/a
ctive/cm/trace/cti/sdl 0 0
~
Thanks,
Anamitra
On 8/14/12 6:44 AM, "Daniel J Walsh" <dwalsh@xxxxxxxxxx> wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>On 08/13/2012 06:55 PM, Anamitra Dutta Majumdar (anmajumd) wrote:
>> Hi Dan,
>>
>> Thanks for your response.
>>
>> I do not see any denials though.
>>
>> What policies should I be checking for.
>>
>I am not sure what you are doing, but if you have a compiled policy on an
>Older OS, you should recompile it on the NEW Os. not just attempt to
>install a
>policy module.
>
>http://danwalsh.livejournal.com/49762.html
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.12 (GNU/Linux)
>Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
>iEYEARECAAYFAlAqVlkACgkQrlYvE4MpobMUvgCgsiHuJ9wOaqVdfdR1R8lAQhRi
>u8wAoN6tL4tz9d34PRkTOaJpZWVLQGXs
>=SsuI
>-----END PGP SIGNATURE-----
--
selinux mailing list
selinux@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/selinux
