From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea01.nsa.gov (msux-gh1-uea01.nsa.gov [63.239.67.1]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n7U6uWdq013683 for ; Sun, 30 Aug 2009 02:56:32 -0400 Received: from mail-yw0-f187.google.com (localhost [127.0.0.1]) by msux-gh1-uea01.nsa.gov (8.12.10/8.12.10) with ESMTP id n7U6ttjQ023032 for ; Sun, 30 Aug 2009 06:55:55 GMT Received: by ywh17 with SMTP id 17so4547959ywh.3 for ; Sat, 29 Aug 2009 23:56:31 -0700 (PDT) Date: Sun, 30 Aug 2009 14:56:26 +0800 From: "zheyeung" To: "selinux" Cc: "refpolicy" Subject: I've got a problem in my installing selinux Message-ID: <200908301456154069423@gmail.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=====003_Dragon101623344630_=====" Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov This is a multi-part message in MIME format. --=====003_Dragon101623344630_===== Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi,everybody, I'm a beginner . I've got a problem in selinux installing. At first, I install from selinux-policy-targeted.f11.rpm (which in release CD), then edit /etc/ selinux/config. change the mode to (enforcing,targeted),restart. everything is ok. Then ,I download refpolicy.tar.gz from tresys.com. make and make install it by Eclipse-Slide. Here the problem comes. No matter I running selinux in enforcing or in permissive, my F11 failed in rebooting .It stop at Init process, which can not enter the graphic terminal. I guess , is there extra work I should do but I didn't ? 2009-08-30 zheyeung --=====003_Dragon101623344630_===== Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: 7bit

Hi,everybody, I'm a beginner . I've got a problem in selinux installing.

At first, I install from selinux-policy-targeted.f11.rpm (which in release CD), then edit /etc/ selinux/config. change the mode to (enforcing,targeted),restart. everything is ok.

Then ,I download refpolicy.tar.gz from tresys.com. make and make install it by Eclipse-Slide. Here the problem comes. No matter I running selinux in enforcing or in permissive, my F11 failed in rebooting .It stop at Init process, which can not enter the graphic terminal.

I guess , is there extra work I should do but I didn't ?

2009-08-30

zheyeung

--=====003_Dragon101623344630_=====-- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from msux-gh1-uea02.nsa.gov (msux-gh1-uea02.nsa.gov [63.239.67.2]) by tarius.tycho.ncsc.mil (8.13.1/8.13.1) with ESMTP id n7U7LqkD015200 for ; Sun, 30 Aug 2009 03:21:52 -0400 Received: from mail-gx0-f205.google.com (localhost [127.0.0.1]) by msux-gh1-uea02.nsa.gov (8.12.10/8.12.10) with ESMTP id n7U7N6xS021181 for ; Sun, 30 Aug 2009 07:23:06 GMT Received: by gxk1 with SMTP id 1so4061752gxk.17 for ; Sun, 30 Aug 2009 00:21:06 -0700 (PDT) Message-ID: <4A9A2867.30403@gmail.com> Date: Sun, 30 Aug 2009 00:21:11 -0700 From: "Justin P. Mattock" MIME-Version: 1.0 To: zheyeung CC: selinux , refpolicy Subject: Re: I've got a problem in my installing selinux References: <200908301456154069423@gmail.com> In-Reply-To: <200908301456154069423@gmail.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov zheyeung wrote: > Hi,everybody, I'm a beginner . I've got a problem in selinux installing. > At first, I install from selinux-policy-targeted.f11.rpm (which in > release CD), then edit /etc/ selinux/config. change the mode > to (enforcing,targeted),restart. everything is ok. > Then ,I download refpolicy.tar.gz from tresys.com. make and make > install it by Eclipse-Slide. Here the problem comes. No matter I > running selinux in enforcing or in permissive, my F11 failed in > rebooting .It stop at Init process, which can not enter the graphic > terminal. > I guess , is there extra work I should do but I didn't ? > 2009-08-30 > ------------------------------------------------------------------------ > zheyeung have you added your boot params? selinux=1 enforcing=0 Justin P. Mattock -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: I've got a problem in my installing selinux From: Stephen Smalley To: zheyeung Cc: selinux In-Reply-To: <200908301456154069423@gmail.com> References: <200908301456154069423@gmail.com> Content-Type: text/plain Date: Mon, 31 Aug 2009 08:30:39 -0400 Message-Id: <1251721839.16143.24.camel@moss-pluto.epoch.ncsc.mil> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Sun, 2009-08-30 at 14:56 +0800, zheyeung wrote: > Hi,everybody, I'm a beginner . I've got a problem in selinux > installing. > > At first, I install from selinux-policy-targeted.f11.rpm (which in > release CD), then edit /etc/ selinux/config. change the mode > to (enforcing,targeted),restart. everything is ok. > > Then ,I download refpolicy.tar.gz from tresys.com. make and make > install it by Eclipse-Slide. Here the problem comes. No matter I > running selinux in enforcing or in permissive, my F11 failed in > rebooting .It stop at Init process, which can not enter the graphic > terminal. > > I guess , is there extra work I should do but I didn't ? I'm not sure why it didn't work in permissive mode (boot with enforcing=0 on the kernel command line), but you'll likely need to relabel your filesystems (boot with autorelabel on the kernel command line or touch /.autorelabel and reboot or just run fixfiles relabel manually). But why are you doing this in the first place? What couldn't you do with the Fedora policy via local policy modules or semanage customizations? Or why not start from the Fedora selinux-policy .src.rpm to minimize your divergence? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message. From mboxrd@z Thu Jan 1 00:00:00 1970 From: justinmattock@gmail.com (Justin P. Mattock) Date: Sun, 30 Aug 2009 00:21:11 -0700 Subject: [refpolicy] I've got a problem in my installing selinux In-Reply-To: <200908301456154069423@gmail.com> References: <200908301456154069423@gmail.com> Message-ID: <4A9A2867.30403@gmail.com> To: refpolicy@oss.tresys.com List-Id: refpolicy.oss.tresys.com zheyeung wrote: > Hi,everybody, I'm a beginner . I've got a problem in selinux installing. > At first, I install from selinux-policy-targeted.f11.rpm (which in > release CD), then edit /etc/ selinux/config. change the mode > to (enforcing,targeted),restart. everything is ok. > Then ,I download refpolicy.tar.gz from tresys.com. make and make > install it by Eclipse-Slide. Here the problem comes. No matter I > running selinux in enforcing or in permissive, my F11 failed in > rebooting .It stop at Init process, which can not enter the graphic > terminal. > I guess , is there extra work I should do but I didn't ? > 2009-08-30 > ------------------------------------------------------------------------ > zheyeung have you added your boot params? selinux=1 enforcing=0 Justin P. Mattock