network packets have become unlabeled_t

[Antoine Martin <antoine@nagafix.co.uk>]

[-- Attachment #1: Type: text/plain, Size: 838 bytes --]

Hi list,

Using recent kernels (started around 2.6.16) I can't use the network in
enforcing mode because all the packets (in and out) are unlabeled.
ie with ssh:
audit(1145733148.799:164): avc:  denied  { recvfrom } for
scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t
tclass=association

audit2allow would like me to add:
allow mysqld_t unlabeled_t:association { recvfrom sendto };
allow named_t unlabeled_t:association { recvfrom sendto };
allow sshd_t unlabeled_t:association { recvfrom sendto };
(and so on)

Where is this coming from? Have I missed an option for labeling network
interfaces? If so, where? SECURITY_NETWORK is set.

I have done make clean; make reload;
policy.conf does contain things like:
type ssh_port_t, port_type, reserved_port_type;

I'm stuck.

Thanks
Antoine

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 191 bytes --]