Re: MLS required even when MLS is disabled?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/25/2013 03:21 PM, Stephen Smalley wrote:
> On 11/25/2013 03:12 PM, Sven Vermeulen wrote:
>> Hi all
>>
>> I have a report that mentions that the new userspace release does not like
>> non-MLS policies:
>>
>> # semanage fcontext -a -t swapfile_t "/swapfile"
>> libsepol.context_from_record: MLS is disabled, but MLS context "s0" found (No such file or directory).
>> libsepol.context_from_record: could not create context structure (Invalid argument).
>> libsemanage.validate_handler: invalid context system_u:object_r:swapfile_t:s0 specified for /swapfile [all files] (Invalid argument).
>> libsemanage.dbase_llist_iterate: could not iterate over records (Invalid argument).
>> OSError: Invalid argument
>>
>> # semanage login -a -s staff_u amade            
>> libsemanage.validate_handler: MLS is disabled, but MLS range s0 was found for Unix user amade (No such file or directory).
>> libsemanage.validate_handler: seuser mapping [amade -> (staff_u, s0)] is invalid (No such file or directory).
>> libsemanage.dbase_llist_iterate: could not iterate over records (No such file or directory).
>> OSError: No such file or directory
>>
>> Any idea what could be the cause of this?
> 
> Probably this one.

Reverted.  Pushed as policycoreutils-2.2.4.
Will accept a new patch on next that does it conditionally under the mls
enabled case.



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.




[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux