Re: [gentoo-hardened] locked out of selinux

[Matt Harrison]

max wrote:
> Matt Harrison wrote:
>> Matt Harrison wrote:
>>> I previously installed a virtual machine with selinux etc to see if I
>>> could get my head round it and it all worked fine.
>>
>> Actually this isn't true, when enabling enforce on my test machine it
>> locks me out of everything as well.
>>
>> This is a complete mystery to me and quite disappointing.
>>
> set selinux to permissive and check the logs when the box comes up
>

Thanks for the reply,

Ok, firstly if I boot up in enforcing mode it halts saying something
like access to /sbin/init was denied.

If I boot up permissive I get tonnes of denied messages in dmesg.
There's far too many to list so I've attached a trimmed dmesg output,
starting from the first related message.

From my untrained eye looking over these messages it seems that a lot of
core system stuff is being denied access, why I have no clue, everything
should be labelled and setup according to the gentoo selinux howto.

Grateful for any input.

Thanks

Matt