Gentoo Archives: gentoo-hardened

From: William Keaney <keaneyw@×××××.com>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] SELinux boot errors
Date: Wed, 01 Oct 2008 18:47:42
Message-Id: 7b2ab8cd0810011146u44c9939aw9cfd32d529d5c4e5@mail.gmail.com
In Reply to: [gentoo-hardened] SELinux boot errors by Markus Bartl
1 On Wed, Oct 1, 2008 at 2:45 AM, Markus Bartl
2 <hardened@××××××××××××××××.de>wrote:
3
4 > Hi Folks!
5 >
6 > Im now able to boot up in enforcing mode and log in to my system.
7 >
8 > What i still get is
9 > Sep 30 10:20:01 odin type=1400 audit(1222762783.108:5): avc: denied {
10 > read write } for pid=1278 comm="modprobe" path="/dev/null" dev=tmpfs
11 > ino=1330 scontext=system_u:system_r:insmod_t
12 > tcontext=system_u:object_r:device_t tclass=chr_file
13 > ...
14 > Sep 30 10:20:01 odin type=1400 audit(1222762796.338:19): avc: denied {
15 > write } for pid=2882 comm="runscript.sh" name="resolv.conf" dev=sda3
16 > ino=1999328 scontext=system_u:system_r:initrc_t
17 > tcontext=system_u:object_r:net_conf_t tclass=file
18 > Sep 30 10:20:01 odin type=1400 audit(1222762801.746:21): avc: denied {
19 > search } for pid=3681 comm="syslog-ng" name="lib" dev=sda3 ino=770262
20 > scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_lib_t
21 > tclass=dir
22 > Sep 30 10:35:05 odin type=1400 audit(1222763686.716:3): avc: denied {
23 > write } for pid=1150 comm="bash" name="null" dev=tmpfs ino=1330
24 > scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:device_t
25 > tclass=chr_file
26 >
27 > Im not quite sure if the /dev/null thing is really a problem, but the
28 > reslov.conf thing is one, because i dont get an IP from DHCP later on during
29 > boot.
30 > Again any ideas are welcome.
31 >
32 > Regards,
33 > Markus
34 >
35 >
36 The /dev/null thing is due to a temporary mislabeling of the nodes under
37 /dev/ during udev initialization. I have submitted a patch to Chris
38 PeBenito that should fix this.
39
40 Will

Replies

Subject Author
Re: [gentoo-hardened] SELinux boot errors Markus Bartl <hardened@××××××××××××××××.de>