I finished porting dssp-base to dssp1-base, however when i try testing it load_policy fails with ENOENT. Even though load_policy returns error status the policy seems to be loaded, except that it is not (or so it seems). When i reboot the system freezes for whatever reason. Whether it is due to systemd refusing due to load_policy failure or anything else i am not sure. I have double checked the policy. 1. secilc has no problems with it 2. the initial sids are declared and ordered 3. the classes are there (and the linux classes are ordered) I cannot think of anything that might cause this and i am looking for suggestions. It is easy to reproduce: 1. git clone https://github.com/DefenSec/dssp1-base.git 2. cd dssp1-base 3. secilc `ls *.cil` 4. seinfo policy.30 5. mv /etc/selinux/targeted/policy/policy.30 /etc/selinux/targeted/policy/policy.30.ori 6. cp policy.30 /etc/selinux/targeted/policy/ 7. setenforce 0 8. load_policy 9. sestatus, seinfo, ps uaxZ I have also uploaded a demo: https://youtu.be/8NCME9dLZd4 Suggestions and help are appreciated -- Key fingerprint = 5F4D 3CDB D3F8 3652 FBD8 02D5 3B6C 5F1D 2C7B 6B02 https://sks-keyservers.net/pks/lookup?op=get&search=0x3B6C5F1D2C7B6B02 Dominick Grift
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.