Security Enhanced Linux
What's New
Frequently Asked Questions
Background
Documents
License
Download
Participating
Mail List
Archives
Remaining Work
Contributors
Related Work
Press Releases
Information Assurance Research
NIARL In-house Research Areas
Mathematical Sciences Program
Sabbaticals
Computer & Information Sciences Research
Technology Transfer
Advanced Computing
Advanced Mathematics
Communications & Networking
Information Processing
Microelectronics
Other Technologies
Technology Fact Sheets
Publications
Related Links
|
SELinux Mailing ListProblems with 2.4.24
From: Jaros³aw Nozderko <jaroslaw.nozderko_at_polkomtel.com.pl>
Date: Tue, 13 Apr 2004 11:53:52 +0200
I'm trying to set up SELinux (SUSE 9 Pro) and have problems. I realize, of course, that I'm probably making some basic mistake, as I'm quite new to SELinux.
I've downloaded prepatched 2.4.24 kernel and
userland tools from NSA. I've also added systrace
(http://www.systrace.org) and epoll
I've built and install kernel, trying to follow instructions in SELinux README. Kernel boots OK with enforcing=1:
$ dmesg | grep SELinux
I've created /selinux directory. README (BUILDING AND INSTALLING, p. 4) says selinuxfs should be mounted by init. It doesn't seem to do it - I had to do it manually or to add fstab entry: none /selinux selinuxfs defaults 0 0 Then selinuxfs gets mounted:
# mount
# more /selinux/enforce
I've installed SEL userland and added my user 'jarek' to policy/users: user jarek roles { user_r }; ... and moved up *.te from unused directory. Then I've installed by 'make install'. After reboot, the situation is as follows: # ps --context PID SID CONTEXT COMMAND 1414 - - su 1415 - - bash 1787 - - ps --context
# newrole -r sysadm_r
So, it seems something is seriously wrong here. I'm trying to assign ext. attributes (README, p. 6): # cd /etc/security/selinux/src/policy
policy# make relabel
file_contexts/program/chkpwd.fc file_contexts/program/crond.fc file_contexts/program/crontab.fc file_contexts/program/fsadm.fc file_contexts/program/getty.fc file_contexts/program/hostname.fc file_contexts/program/ifconfig.fc file_contexts/program/initrc.fc file_contexts/program/init.fc file_contexts/program/klogd.fc file_contexts/program/ldconfig.fc file_contexts/program/load_policy.fc file_contexts/program/login.fc file_contexts/program/logrotate.fc file_contexts/program/modutil.fc file_contexts/program/mount.fc file_contexts/program/mta.fc file_contexts/program/netutils.fc file_contexts/program/newrole.fc file_contexts/program/passwd.fc file_contexts/program/setfiles.fc file_contexts/program/ssh.fc file_contexts/program/su.fc file_contexts/program/syslogd.fc file_contexts/program/tmpreaper.fc file_contexts/program/useradd.fc file_contexts/program/xdm.fc file_contexts/program/xfs.fc file_contexts/program/xserver.fc > file_contexts/file_contexts.tmpcat file_contexts/file_contexts.homedirtmp >> file_contexts/file_contexts.tmp mv file_contexts/file_contexts.tmp file_contexts/file_contexts /usr/sbin/setfiles file_contexts/file_contexts `mount | awk '/(ext[23]| xfs).*rw/{print $3}'` /usr/sbin/setfiles: read 455 specifications /usr/sbin/setfiles: invalid context system_u:object_r:file_t on line number 39 /usr/sbin/setfiles: invalid context system_u:object_r:root_t on line number 44 /usr/sbin/setfiles: invalid context system_u:object_r:mnt_t on line number 48 /usr/sbin/setfiles: invalid context system_u:object_r:var_t on line number 53 /usr/sbin/setfiles: invalid context system_u:object_r:catman_t on line number 54 /usr/sbin/setfiles: invalid context system_u:object_r:catman_t on line number 55 /usr/sbin/setfiles: invalid context system_u:object_r:var_yp_t on line number 56 /usr/sbin/setfiles: invalid context system_u:object_r:var_lib_t on line number 57 /usr/sbin/setfiles: invalid context system_u:object_r:var_lib_nfs_t on line number 58 /usr/sbin/setfiles: invalid context system_u:object_r:tetex_data_t on line number 59 Exiting after 10 errors. There are entries in logs:
/var/log/warn: Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t ====================================================== /var/log/messages: Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:43:22 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:49:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:54:31 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:file_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:root_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:mnt_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:catman_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_yp_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:var_lib_nfs_t Apr 12 17:56:23 skorpion kernel: security_context_to_sid: called before initial load_policy on unknown context system_u:object_r:tetex_data_t Does "before initial load_policy" mean that policy is not loaded ? Did I miss something obvious ?
Best regards,
-- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.Received on Tue 13 Apr 2004 - 05:54:04 EDT |
|
Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009 |