Gentoo Archives: gentoo-hardened

From: Vladimir Berezniker <vmpn@×××××××××.com>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] [SELinux] broken policy and emerge file labeling
Date: Thu, 16 Sep 2004 21:03:42
Message-Id: 4149FF8C.3020906@hitechman.com
1 I am unable to load a policy into the running kernel:
2
3 * Loading policy.17
4 /usr/sbin/load_policy: security_load_policy failed
5 make: *** [tmp/load] Error 3
6
7 My kernel is 2.6.7-gentoo-r11. I cannot find the cause of why this is
8 happening so I wanted to upgrade the kernel.
9
10 However I get:
11
12 >>> Setting SELinux security labels
13 /usr/sbin/setfiles: invalid context system_u:object_r:file_context_t on
14 line number 259
15 /usr/sbin/setfiles: read 702 specifications
16
17 Which I expect to get after trying to merge any package.
18
19
20 I am stuck with chicken and the egg problem:
21
22 emerge requires loaded policy
23 in order to load policy i need to emerge.
24
25 My question is how do I tell emerge not to relabel the files before
26 install? I can always run rlpkg afterwards.
27
28 Sincerely,
29 Vladimir Berezniker
30
31
32
33
34
35 --
36 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] [SELinux] broken policy and emerge file labeling Chris PeBenito <pebenito@g.o>