Re: boot failures as of "selinux: checkreqprot is deprecated, add some ssleep() discomfort"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 14, 2022 at 05:12:09PM -0400, Paul Moore wrote:
> On Thu, Apr 14, 2022 at 4:56 PM J. Bruce Fields <bfields@xxxxxxxxxxxx> wrote:
> >
> > On Thu, Apr 14, 2022 at 04:38:13PM -0400, Paul Moore wrote:
> > > Jokes aside, I'm sorry that caught you out, but thanks for reporting
> > > it.  I thought I tested all the combinations, but obviously I missed
> > > one.  The obvious fix is to move the ssleep() call out of
> > > checkreqprot_set() and into sel_write_checkreqprot(); you'll still get
> > > the error message on the console, but you'll only hit the sleep when
> > > toggling the flag after boot, at runtime.  It's similar to the runtime
> > > disable deprecation.  I'll work up a patch as soon as I'm done with
> > > this email.
> >
> > Sounds good.
> >
> > > However, a couple of quick questions: this looks like a custom/hand
> > > built kernel, yes?  If so, is this an old kernel config that you just
> > > keep updating via 'make oldconfig' or something similar?
> >
> > Yes, exactly, I've got scripts that take a known old kernel config and
> > run make oldconfig.
> >
> > > I'm asking
> > > not to critique your kernel config choice (although this particular
> > > Kconfig knob *is* going away), but rather I want to make sure there
> > > isn't somebody/something out there still enabling this for a large
> > > user base.
> >
> > Got it, no, these are just systems I set up for nightly regression
> > testing of the kernel's NFS client and server.
> 
> Okay, thanks, that's good to know.
> 
> Since you're already building your own kernel you should be able to
> just add the patch I just posted to your pile, it should solve your
> immediate problem.

Yep, confirmed that I can boot after applying that.

> I would also strongly encourage you to drop that
> Kconfig tweak too.

OK, done, thanks.

--b.



[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux