From mboxrd@z Thu Jan 1 00:00:00 1970 Message-ID: <4665DD32.6040508@redhat.com> Date: Tue, 05 Jun 2007 18:01:22 -0400 From: Daniel J Walsh MIME-Version: 1.0 To: Shintaro Fujiwara CC: selinux@tycho.nsa.gov, sds@tycho.nsa.gov, cpebenito@tresys.com Subject: Re: Can't login in F7 strict References: In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov Shintaro Fujiwara wrote: > I used interfaces, still error occurs when I install localaudit.pp. > > libsepol.permission_copy_callback: Module localaudit depends on > permission nlsms_relay in class netlink_audit_socket, not satisfied > libsemanage.semanage_link_sandbox; Link packages failed > semodule: Failed ! > > module localaudit 1.0; > > require { > type local_login_t > .... > class netlink_audio_socket { ......nlsms_relay .....}; netlink_audit_socket not audio. > .... > } > logging_send_audit_msg(local_login_t) > logging_set_loginuid(local_login_t) > > Almost, but anyway, still I can not install my module (very basic one > I guess...;) > > > 2007/6/3, Shintaro Fujiwara : >> Hello. >> >> I'm trying to work out on F7 strict policy. >> My server is now FC6, so I'm trying to change it 7. >> >> I yum installed every selinux related packages. >> I made localaudit.pp typing >> #audit2allow -i /var/log/audit/audit.log -m localaudit > localaudit.te >> at /usr/share/selinux/devel >> #semodule -i localaudit.pp >> violation reported by libsepol.chek_assertions >> >> local_login_t local_login_t:netlink_audit_socket { nlmsg_relay }; >> local_login_t local_login_t:capability { audit_write }; >> local_login_t local_login_t:capability { audit_control }; >> >> So,I commented those lines on localaudit.te including require brace. >> This time I succeeded installing localaudit.pp. >> >> I restarted my machine setting Enforcing/strict. >> During the startup process, I could see Keymap had failed. >> I can't login from console. >> I typed like a US key not jp106, still I can't. >> >> You made strict policy not logging in from console? >> What should I do? >> >> >> homepage http://intrajp.no-ip.com/ >> SELinux Forum JP http://intrajp.no-ip.com/xoops >> SELinux Wiki JP http://intrajp.no-ip.com/pukiwiki >> my blog JP http://intrajp.no-ip.com/nucleus >> -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.