----- Original Message ----- > From: "Kashif ali" <kashif.ali.9498@xxxxxxxxx> > To: "ileyd" <ileyd@xxxxxxxxxx> > Cc: "SELinux" <selinux@xxxxxxxxxxxxx> > Sent: Friday, August 26, 2016 12:55:56 PM > Subject: Re: MLS Enforcing Problem > > i'm using centos 6.5 and there is no error after putting selinux in enforced > machine won't allow me to login > How are you trying to login? Is this through ssh? If so please make sure you have the 'ssh_sysadm_login' boolean enabled. > On Fri, Aug 26, 2016 at 9:48 PM, ileyd < ileyd@xxxxxxxxxx > wrote: > > > Hi, > > Could you give more detail? What operating system are you running, what error > message exactly are you getting, etc. > > This sounds vaguely like an issue that seems to be present on EL7 and later, > and all remotely recent fedora versions. > > The issue seems to be caused by /etc being labelled as SystemHigh instead of > SystemLow, despite the policy. If you start the system in permissive mode, > relabel it manually, and then put in in enforcing mode, you're able to > login, etc. I'm not sure what causes it or how to fix it. > > Kind Regards, > ileyd > > > On 26 Aug 2016, at 7:44 PM, Kashif ali < kashif.ali.9498@xxxxxxxxx > wrote: > > > > Hi > > * I'm facing an issue which is as follow > > When Selinux is in enforcing mode and Policy type is Mls after relabeling > > of whole system it doesn't Allow me to login it gives me error login > > incorrect did i missing something? or it is something else. > > Thanks > > _______________________________________________ > > Selinux mailing list > > Selinux@xxxxxxxxxxxxx > > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx . > > To get help, send an email containing "help" to > > Selinux-request@xxxxxxxxxxxxx . > > > _______________________________________________ > Selinux mailing list > Selinux@xxxxxxxxxxxxx > To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. > To get help, send an email containing "help" to > Selinux-request@xxxxxxxxxxxxx. -- Simon Sekidde * Red Hat, Inc. * Westford, MA gpg: 5848 958E 73BA 04D3 7C06 F096 1BA1 2DBF 94BC 377E _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
