Re: [gentoo-hardened] Can't log into my selinux system

[Chris PeBenito]

On Wed, 2004-04-28 at 12:33, Ed Wildgoose wrote:
> >Login contexts are determined by the running policy, so login gets them
> >by requesting them through selinuxfs (/selinux).  So to correctly login
> >locally you need:
> >
> >1. correctly setup policy
> >2. agetty is in getty_t
> >3. /bin/login is login_exec_t
> >4. selinuxfs is mounted
>
> Hmm, ok, this looks like the problem then.  2) agetty is running in
> system_u:system_r:kernel_t?  Should that be happening?  1), 3) and 4)
> are fine
>
> Tested rebooting and I can log in then.  However, the policy is clearly
> not auto loading, ps -AZ shows everything running as "kernel".  cd
> /etc/blah/policy and doing make reload sets agetty back as described
> above and no more consoles can login...  SSH into the machine doesn't
> work then either, with an error in syslog which looks like basically the
> same thing, no default security context found for user root...

Ok, so the problem is that the policy isn't being loaded by init. 
Remerge baselayout to make sure init can load the policy, and make sure
you have the correct version policy in /etc/security/selinux/, then
policy should load on boot.

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243