Re: Can't login in F7 strict

[Daniel J Walsh <dwalsh@redhat.com>]

Shintaro Fujiwara wrote:
> I used interfaces, still error occurs when I install localaudit.pp.
>
> libsepol.permission_copy_callback: Module localaudit depends on
> permission nlsms_relay in class netlink_audit_socket, not satisfied
> libsemanage.semanage_link_sandbox; Link packages failed
> semodule: Failed !
>
> module localaudit 1.0;
>
> require {
>    type local_login_t
>    ....
>    class netlink_audio_socket { ......nlsms_relay .....};
netlink_audit_socket not audio.
>    ....
> }
> logging_send_audit_msg(local_login_t)
> logging_set_loginuid(local_login_t)
>
> Almost, but anyway, still I can not install my module (very basic one
> I guess...;)
>
>
> 2007/6/3, Shintaro Fujiwara <shintaro.fujiwara@gmail.com>:
>> Hello.
>>
>> I'm trying to work out on F7 strict policy.
>> My server is now FC6, so I'm trying to change it 7.
>>
>> I yum installed every selinux related packages.
>> I made localaudit.pp typing
>> #audit2allow -i /var/log/audit/audit.log -m localaudit > localaudit.te
>> at /usr/share/selinux/devel
>> #semodule -i localaudit.pp
>> violation reported by libsepol.chek_assertions
>>
>> local_login_t local_login_t:netlink_audit_socket { nlmsg_relay };
>> local_login_t local_login_t:capability { audit_write };
>> local_login_t local_login_t:capability { audit_control };
>>
>> So,I commented those lines on localaudit.te including require brace.
>> This time I succeeded installing localaudit.pp.
>>
>> I restarted my machine setting Enforcing/strict.
>> During the startup process, I could see Keymap had failed.
>> I can't login from console.
>> I typed like a US key not jp106, still I can't.
>>
>> You made strict policy not logging in from console?
>> What should I do?
>>
>>
>> homepage http://intrajp.no-ip.com/
>> SELinux Forum JP http://intrajp.no-ip.com/xoops
>> SELinux Wiki JP http://intrajp.no-ip.com/pukiwiki
>> my blog JP http://intrajp.no-ip.com/nucleus
>>


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.