G.Wolfe Woodbury wrote: > Daniel J Walsh wrote: >> G.Wolfe Woodbury wrote: >>> Daniel J Walsh wrote: >>>> G.Wolfe Woodbury wrote: >>>>> Today's rawhide (20080414) installs just fine (my problem before seems >>>>> to have been a read error on the boot.iso). >>>>> However, the post-firstboot system won't allow any logins (with a >>>>> briefly flashed "no shell" notice on text console) until enforcing=0 is >>>>> set on the boot command line and SELinux is set to permissive mode. >>>>> it's starting to shape up to a decent release. >>>> What avc's are you seeing? Please attach the audit.log. >>> Here is the audit.log from the affected system, from firstboot to today. >>> -- >>> G. Wolfe Woodbury >> You are logging in as hotplug_t? Which is a mistake. Could you run >> fixfiles restore on your machine to see if it is badly mislabeled? >> >> # rpm -q selinux-policy >> # semanage user -l >> # semanage login -l > > There are some strange contexts in /home - relabeling, will check after > reboot on testbed machine. Relabeling seems to have cured the incessant AVC reports. I suspect that something changed in the SELinux package between the initial setup of /home and the re-installation (preserving home) that made the system think that the context was something else. Does system-config-users need an enhancement to relabel" when a pre-existing user is re-added to the system? -- G.Wolfe Woodbury -- fedora-test-list mailing list fedora-test-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-test-list
