reindexing time for SELinux?

reindexing time for SELinux?

[Seth D. Guikema]

I am trying to set up SELinux on my Fedora Core 7 workstation. I am 
using the pre-installed GUI SELinux configuration tool in FC7. I 
selected a targeted set-up. I was warned that the workstation would need 
to reindex the files at the next reboot and that this would take a 
while. I clicked ok. I rebooted the workstation Saturday morning at 
about 10am. It is still unresponsive (and not available for remote 
connections) and working hard this morning, almost 48 hours later. How 
long should reindexing take? The workstation is new. It has 2 1TB disks 
(RAID mirrored), but there isn't much on them yet - perhaps 30MB plus 
the OS and other programs installed by the manufacturer (ASL). Does 
reindexing really take this long? This is my first attempt at SELinux, 
and any help is appreciated. Thank you.

Sincerely,
Seth Guikema

-- 
Assistant Professor
Department of Geography and Environmental Engineering
Johns Hopkins University
Baltimore, MD 21218
(410)516-6042
sguikema@jhu.edu
https://jshare.johnshopkins.edu/sguikem1/public_html/


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: reindexing time for SELinux?

[Stephen Smalley]

On Mon, 2008-02-04 at 09:21 -0500, Seth D. Guikema wrote:
> I am trying to set up SELinux on my Fedora Core 7 workstation. I am 
> using the pre-installed GUI SELinux configuration tool in FC7. I 
> selected a targeted set-up. I was warned that the workstation would need 
> to reindex the files at the next reboot and that this would take a 
> while. I clicked ok. I rebooted the workstation Saturday morning at 
> about 10am. It is still unresponsive (and not available for remote 
> connections) and working hard this morning, almost 48 hours later. How 
> long should reindexing take? The workstation is new. It has 2 1TB disks 
> (RAID mirrored), but there isn't much on them yet - perhaps 30MB plus 
> the OS and other programs installed by the manufacturer (ASL). Does 
> reindexing really take this long? This is my first attempt at SELinux, 
> and any help is appreciated. Thank you.

I assume you mean relabeling rather than reindexing.  It shouldn't take
that long.  Are you getting output on the console?

Try rebooting into single-user mode in permissive mode and relabeling
from there, e.g. boot with 'enforcing=0 single' and run 'fixfiles
relabel' (and remove /.autorelabel if it still exists), then reboot
normally.

-- 
Stephen Smalley
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: reindexing time for SELinux?

[Seth D. Guikema]

I just rebooted, and the box seems to be working fine. It seems to have 
hung in the shutdown sequence. The files were relabeled successfully 
when I rebooted the box. Thank you all.
Seth

Stephen Smalley wrote:
> On Mon, 2008-02-04 at 09:21 -0500, Seth D. Guikema wrote:
>   
>> I am trying to set up SELinux on my Fedora Core 7 workstation. I am 
>> using the pre-installed GUI SELinux configuration tool in FC7. I 
>> selected a targeted set-up. I was warned that the workstation would need 
>> to reindex the files at the next reboot and that this would take a 
>> while. I clicked ok. I rebooted the workstation Saturday morning at 
>> about 10am. It is still unresponsive (and not available for remote 
>> connections) and working hard this morning, almost 48 hours later. How 
>> long should reindexing take? The workstation is new. It has 2 1TB disks 
>> (RAID mirrored), but there isn't much on them yet - perhaps 30MB plus 
>> the OS and other programs installed by the manufacturer (ASL). Does 
>> reindexing really take this long? This is my first attempt at SELinux, 
>> and any help is appreciated. Thank you.
>>     
>
> I assume you mean relabeling rather than reindexing.  It shouldn't take
> that long.  Are you getting output on the console?
>
> Try rebooting into single-user mode in permissive mode and relabeling
> from there, e.g. boot with 'enforcing=0 single' and run 'fixfiles
> relabel' (and remove /.autorelabel if it still exists), then reboot
> normally.
>
>   

-- 
Assistant Professor
Department of Geography and Environmental Engineering
Johns Hopkins University
Baltimore, MD 21218
(410)516-6042
sguikema@jhu.edu
https://jshare.johnshopkins.edu/sguikem1/public_html/


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: reindexing time for SELinux?

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Seth D. Guikema wrote:
> I am trying to set up SELinux on my Fedora Core 7 workstation. I am
> using the pre-installed GUI SELinux configuration tool in FC7. I
> selected a targeted set-up. I was warned that the workstation would need
> to reindex the files at the next reboot and that this would take a
> while. I clicked ok. I rebooted the workstation Saturday morning at
> about 10am. It is still unresponsive (and not available for remote
> connections) and working hard this morning, almost 48 hours later. How
> long should reindexing take? The workstation is new. It has 2 1TB disks
> (RAID mirrored), but there isn't much on them yet - perhaps 30MB plus
> the OS and other programs installed by the manufacturer (ASL). Does
> reindexing really take this long? This is my first attempt at SELinux,
> and any help is appreciated. Thank you.
> 
> Sincerely,
> Seth Guikema
> 
It should not take more then 10 minutes.  I think the process is hung.
I would force a reboot.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkenNMQACgkQrlYvE4MpobP5gQCgnTkOk0fgAZ9oNBo2fwXneMcb
7+EAnRtxxhzYQAngiK0O0LNzU1cBRH7L
=XVH5
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: reindexing time for SELinux?

[Russell Coker]

On Tuesday 05 February 2008 01:21, "Seth D. Guikema" <sguikema@jhu.edu> wrote:
> I am trying to set up SELinux on my Fedora Core 7 workstation. I am
> using the pre-installed GUI SELinux configuration tool in FC7. I
> selected a targeted set-up.

Is it a fresh install or did you just enable SE Linux after previously having 
it disabled?

> I was warned that the workstation would need 
> to reindex the files at the next reboot and that this would take a
> while. I clicked ok. I rebooted the workstation Saturday morning at
> about 10am. It is still unresponsive (and not available for remote
> connections) and working hard this morning, almost 48 hours later. How
> long should reindexing take?

Not 48 hours.  It's a function of the speed of CPU and disk and the number of 
files on disk.  I haven't seen it take more than about an hour on a slow 
machine, but as there is no upper limit on the number of files there is also 
no upper limit on the theoretical amount of time taken.

Did you boot the machine in permissive or enforcing mode?

-- 
russell@coker.com.au
http://etbe.coker.com.au/          My Blog

http://www.coker.com.au/sponsorship.html Sponsoring Free Software development

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.