Re: Problem Setting Policy To Enforcing Mode

["Justin P. Mattock" <justinmattock@gmail.com>]

On Fri, 2008-11-21 at 06:59 -0800, Rahul Jain wrote:
> Hi All,
>  
> This is the first time I am writing to this mailing list in hope of
> receiving help. I am trying to port reference policy by tresys on
> Montavista. I am able to run the policy well in permmisive mode with
> no avc messages in audit log, kern.log or messages. But when I put the
> policy into enforcing mode my system fails to boot, reason seems to
> be problem with init process. I am not able to debug the problem
> because no avc messages are generated for the same, probably because
> the issue comes up even before logging deamons start. Is there anyway
> I can debug my policy and log the avc messages from the very beginning
> of the system startup.
>  
> Rahul Jain
> Rahul Jain  
> 

Have you tyied the command "make enableaudit"
should open the policy up more and generate avc's.
regards;

-- 
Justin P. Mattock <justinmattock@gmail.com>


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.