Gentoo Archives: gentoo-hardened

From: Markus Bartl <hardened@××××××××××××××××.de>
To: gentoo-hardened@l.g.o
Subject: [gentoo-hardened] SELinux boot errors
Date: Wed, 01 Oct 2008 06:45:32
Message-Id: 48E31C7D.3050902@noack-ingenieure.de
1
2
3
4
5
6 Hi Folks!
7
8 Im now able to boot up in enforcing mode and log in to my system.
9
10 What i still get is
11 Sep 30 10:20:01 odin type=1400 audit(1222762783.108:5): avc:� denied� {
12 read write } for� pid=1278 comm="modprobe" path="/dev/null" dev=tmpfs
13 ino=1330 scontext=system_u:system_r:insmod_t
14 tcontext=system_u:object_r:device_t tclass=chr_file
15 ...
16 Sep 30 10:20:01 odin type=1400 audit(1222762796.338:19): avc:� denied�
17 { write } for� pid=2882 comm="runscript.sh" name="resolv.conf" dev=sda3
18 ino=1999328 scontext=system_u:system_r:initrc_t
19 tcontext=system_u:object_r:net_conf_t tclass=file
20 Sep 30 10:20:01 odin type=1400 audit(1222762801.746:21): avc:� denied�
21 { search } for� pid=3681 comm="syslog-ng" name="lib" dev=sda3
22 ino=770262 scontext=system_u:system_r:syslogd_t
23 tcontext=system_u:object_r:var_lib_t tclass=dir
24 Sep 30 10:35:05 odin type=1400 audit(1222763686.716:3): avc:� denied� {
25 write } for� pid=1150 comm="bash" name="null" dev=tmpfs ino=1330
26 scontext=system_u:system_r:initrc_t tcontext=system_u:object_r:device_t
27 tclass=chr_file
28
29 Im not quite sure if the /dev/null thing is really a problem, but the
30 reslov.conf thing is one, because i dont get an IP from DHCP later on
31 during boot.
32 Again any ideas are welcome.
33
34 Regards,
35 Markus
36
37
38
39
40
41
42

Replies

Subject Author
Re: [gentoo-hardened] SELinux boot errors William Keaney <keaneyw@×××××.com>