I've got a problem in my installing selinux

I've got a problem in my installing selinux

[zheyeung]

[-- Attachment #1: Type: text/plain, Size: 611 bytes --]

Hi,everybody, I'm a beginner . I've got a problem in selinux installing.

At first, I install from selinux-policy-targeted.f11.rpm (which in release CD), then edit /etc/ selinux/config. change the mode to (enforcing,targeted),restart. everything is ok.

Then ,I download refpolicy.tar.gz from tresys.com. make and make install it  by Eclipse-Slide. Here the problem comes. No matter I running selinux in enforcing or in permissive, my F11 failed in rebooting .It stop at Init process, which can not enter the graphic terminal.

I guess , is there extra work I should do but I didn't ?

2009-08-30 



zheyeung 

[-- Attachment #2: Type: text/html, Size: 1413 bytes --]

Re: I've got a problem in my installing selinux

[Justin P. Mattock]

zheyeung wrote:
> Hi,everybody, I'm a beginner . I've got a problem in selinux installing.
> At first, I install from selinux-policy-targeted.f11.rpm (which in 
> release CD), then edit /etc/ selinux/config. change the mode 
> to (enforcing,targeted),restart. everything is ok.
> Then ,I download refpolicy.tar.gz from tresys.com. make and make 
> install it  by Eclipse-Slide. Here the problem comes. No matter I 
> running selinux in enforcing or in permissive, my F11 failed in 
> rebooting .It stop at Init process, which can not enter the graphic 
> terminal.
> I guess , is there extra work I should do but I didn't ?
> 2009-08-30
> ------------------------------------------------------------------------
> zheyeung
have you added your boot params?

selinux=1 enforcing=0

Justin P. Mattock

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

[refpolicy] I've got a problem in my installing selinux

[Justin P. Mattock]

zheyeung wrote:
> Hi,everybody, I'm a beginner . I've got a problem in selinux installing.
> At first, I install from selinux-policy-targeted.f11.rpm (which in 
> release CD), then edit /etc/ selinux/config. change the mode 
> to (enforcing,targeted),restart. everything is ok.
> Then ,I download refpolicy.tar.gz from tresys.com. make and make 
> install it  by Eclipse-Slide. Here the problem comes. No matter I 
> running selinux in enforcing or in permissive, my F11 failed in 
> rebooting .It stop at Init process, which can not enter the graphic 
> terminal.
> I guess , is there extra work I should do but I didn't ?
> 2009-08-30
> ------------------------------------------------------------------------
> zheyeung
have you added your boot params?

selinux=1 enforcing=0

Justin P. Mattock

Re: I've got a problem in my installing selinux

[Stephen Smalley]

On Sun, 2009-08-30 at 14:56 +0800, zheyeung wrote:
> Hi,everybody, I'm a beginner . I've got a problem in selinux
> installing.
>  
> At first, I install from selinux-policy-targeted.f11.rpm (which in
> release CD), then edit /etc/ selinux/config. change the mode
> to (enforcing,targeted),restart. everything is ok.
>  
> Then ,I download refpolicy.tar.gz from tresys.com. make and make
> install it  by Eclipse-Slide. Here the problem comes. No matter I
> running selinux in enforcing or in permissive, my F11 failed in
> rebooting .It stop at Init process, which can not enter the graphic
> terminal.
>  
> I guess , is there extra work I should do but I didn't ?

I'm not sure why it didn't work in permissive mode (boot with
enforcing=0 on the kernel command line), but you'll likely need to
relabel your filesystems (boot with autorelabel on the kernel command
line or touch /.autorelabel and reboot or just run fixfiles relabel
manually).

But why are you doing this in the first place?  What couldn't you do
with the Fedora policy via local policy modules or semanage
customizations?  Or why not start from the Fedora
selinux-policy .src.rpm to minimize your divergence?

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.