[gentoo-hardened] Policy versions...

[Jon Anderson]

I'm pretty overwhelmed by selinux...It doesn't really make all that much 
sense, but one thing that's been bothering me is what looks like a 
policy version mismatch after a kernel upgrade:

# cat /selinux/policyvers
17

Yet,

# make load
 * Loading policy.15

And selinux does not function at all. (Entering enforcing mode just 
renders the system unusable.) The system worked fine in enforcing mode 
(with a few exceptions: djbdns/daemontools, and a few other minor 
things) with kernel 2.6.3-mm2. With kernels 2.6.5-mm1, 2.6.5-mm6 I get 
totally wonky, unpredictable behavior. (Like, I get asked for a login 
context sometimes, but not all the time.) I also don't get avc denied 
messages anymore, and a make relabel doesn't spit out errors, but a 
dmesg (after a make relabel) contains thousands of:

inode_doinit_with_dentry:  context_to_sid(system_u:object_r:opt_t) 
returned 22 for dev=md0 ino=96815665

Any ideas?

Cheers,

jon

--
gentoo-hardened@g.o mailing list