Gentoo Archives: gentoo-hardened

From: capsel <capsel@××××××××××××××××××××××.pl>
To: capsel <capsel@××××××××××××××××××××××.pl>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] BIG problem with SELinux
Date: Tue, 23 Nov 2004 11:55:22
Message-Id: 41A32550.7090503@pc188.lublin.sdi.tpnet.pl
In Reply to: [gentoo-hardened] BIG problem with SELinux by capsel
1 capsel wrote:
2
3 > I can't boot hardened 2.6.7-r10... no PAX
4 > it hangs at :
5 > 1. using udev - root device can't be remounted readonly, it asks for
6 > root passwd but i can't log in
7 > 2. using devfs(automount at boot) - init can't read/search/write
8 > anything. There are errors on the screen about unlabeled_t - How to
9 > relabel devfs?
10 > 3. using devfs(no automount) - it can't mount /dev and /, and asks for
11 > root passwd like in 1.
12 >
13 > it's all happening right after make reload and make relabel in the
14 > /etc/security/selinux/src/policy/ and reboot
15 > mount --bind / ~/test; chroot ./test and make chroot_relabel / make
16 > relabel didn't help
17 >
18 > booting without "enforcing=1" 'works'
19 >
20 > / on ext3
21 > make.profile points to /usr/portage/profiles/selinux/2004.1/x86
22 > USE="-X -gtk -gnome -alsa -kde nptl acl quotas pam ssl maildir"
23 > emerge -uDp --newuse shows nothing
24 > if it is necessary I can paste "some" avc denials from screen :)
25 > everything was compiled from stage1
26 >
27 > PLEASE HELP ME!! ;-(
28 >
29 > Sorry for my english :-)
30 >
31 > --
32 > gentoo-hardened@g.o mailing list
33 >
34 >
35 Everything works after disabling devfs in kernel and unmerging udev...
36 The only problem now is that /home & /usr/src/ are mounting readonly -
37 quotas (on /home) can't be counted.
38 I've got /tmp pointing to /home/tmp.
39 My question is - what should I add to fstab or other configuration files
40 to fix this?
41
42 --
43 gentoo-hardened@g.o mailing list