[gentoo-hardened] locked out of selinux

[Matt Harrison]

Hi all,

I've recently converted one of our firewall/router/proxies to a hardened
system.

I changed the profile, rebuilt a kernel with selinux and recompiled all
necessary packages.

Everything seems to be ok until I set enforcing mode to on, then I get
locked out of everything:

permission denied on many binaries, ls, cat, echo etc.
permission on some directories ie, /root missing.
unable to login as perms on bash are gone.

I also notice that courier-imap refuses to run in the right context and
always runs as system_u:system_r:initrc_t.

I previously installed a virtual machine with selinux etc to see if I
could get my head round it and it all worked fine.

What could be the reason for me getting locked out of my system when
enforce mode is enabled?

BTW I have relabeled filesystems several times as it looked originally
like things just weren't labeled, however they seem fine until enforce
mode is enabled.

Grateful for any help.

Thanks

Matt