Re: [gentoo-hardened] Can't log into my selinux system

[Ed Wildgoose]

> Ok, so the problem is that the policy isn't being loaded by init.
 > Remerge baselayout to make sure init can load the policy, and make sure
 > you have the correct version policy in /etc/security/selinux/, then
 > policy should load on boot.

Hi Chris,

Thanks for your endless patience!  Rebuilding baselayout does indeed 
seem to have allowed the policy to auto-load, and I can now log in via 
console and ssh!! Wahoo

I guess the next steps are to start playing with it.  I'm a bit hesitant 
about how to proceed though.  There are clearly loads of access 
violations even on bootup (at least according to syslog) - from memory, 
lots of processes want urandom and cant have it, there was other stuff 
with mount not being able to access /etc/fstab I think? 

Do I just read the docs and start allowing these in the policy..?  What 
about things which look a little broken, eg emerging gpm and selinux-gpm 
stops my policy compiling with something about ps_aux (from memory) not 
being valid/defined.  Is this a bug, or just something I read the docs 
about and fix..?

I can't help feeling that I haven't done the required reading to even 
get started with selinux, but I'm not sure where to find the quickstart 
guide?  Can you point me towards the docs I should be reading to work 
all this stuff out for myself please?

Thanks for all your help.

Ed W


--
gentoo-hardened@g.o mailing list