Hi,
I've been having a major problem with one particular system trying to
convert it to an SELinux-enabled system. Several people in #selinux
have been very helpful, but so far nothing's working out, so I guess
I'll ask here:
I have a VMWare Virtual Machine running a 2.6.25 kernel with SELinux
support compiled in, and a full SELinux userland (it's Gentoo Hardened,
in case it matters). When I attempt to boot the machine, none of my
startup scripts run and my terminal's getty processes repeatedly die off
until init shuts them down. At the pont where the boot scripts should
be running, INIT just skips right to the next step in the boot process,
which now looks like this:
----------
{some AVCs about init}
INIT: v2.86 booting
INIT: Entering runlevel: 3
printk: 42 messages suppressed.
{a few SELinux AVC's about agetty}
This is (none).
This is (none).
INIT: Index "c1" respawning too fast: disabled for 5 minutes
INIT: Index "c2" respawning too fast: disabled for 5 minutes
.
.
.
INIT: no more processed left in this runlevel
----------
The reason I strongly suspect SELinux is the problem (or at least a
major factor), is that adding "selinux=0" to my boot command line
corrects the problem, and the system boots fine. Everything appears to
be installed and configured correctly, except obviously SELinux is now
disabled. The filesystems are all labeled correctly, and even on the
failing boot the AVC messages display the correct labels, like
tty_device_t and urandom_device_t.
This is a VM so I have ready access to its serial port for debugging,
and can install, patch, etc. anything needed to resolve the problem. I
just have no idea where to start. Can anyone help me out here?
Thanks,
--Mike
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
