load_policy fails to load policy with ENOENT

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I finished porting dssp-base to dssp1-base, however when i try testing
it load_policy fails with ENOENT.

Even though load_policy returns error status the policy seems to be
loaded, except that it is not (or so it seems). When i reboot the system
freezes for whatever reason. Whether it is due to systemd refusing due
to load_policy failure or anything else i am not sure.

I have double checked the policy.

1. secilc has no problems with it
2. the initial sids are declared and ordered
3. the classes are there (and the linux classes are ordered)

I cannot think of anything that might cause this and i am looking for
suggestions.

It is easy to reproduce:

1. git clone https://github.com/DefenSec/dssp1-base.git
2. cd dssp1-base
3. secilc `ls *.cil`
4. seinfo policy.30
5. mv /etc/selinux/targeted/policy/policy.30
/etc/selinux/targeted/policy/policy.30.ori
6. cp policy.30 /etc/selinux/targeted/policy/
7. setenforce 0
8. load_policy
9. sestatus, seinfo, ps uaxZ

I have also uploaded a demo:

https://youtu.be/8NCME9dLZd4

Suggestions and help are appreciated

-- 
Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8  02D5 3B6C 5F1D 2C7B 6B02
https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02
Dominick Grift

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.

[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux