Hello all,
I have just upgraded from F9 to F11 and, still having one or two selinux related problems, decided to do a /.autorelabel.
Knowing how long this can take on my ageing hardware I went off for a cup of tea...
On the screen when I returned (the job had not finished) was: SELinux: Context system_u:object_r:gamin_??? is not valid (left unmapped)
The question marks are mine. I just reached for a pen when another load of messages flashed by and the job finished.
Here is what I found in /var/log/messages:
Context system_u:object_r:gamin_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:pppd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:NetworkManager_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:nscd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:bluetooth_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:squid_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:dovecot_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:kerneloops_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:syslogd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:fail2ban_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:openvpn_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:setroubleshoot_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:rpcbind_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:fsdaemon_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:samba_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:mysqld_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:snmp_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:dnsmasq_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:httpd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:auditd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:ntpd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:squid_var_t:s0 is not valid (left unmapped). Context unconfined_u:object_r:squid_var_t:s0 is not valid (left unmapped).
My question(s):
1) Should I be worried? 2) Should I do anything?
Note: I don't know if this is relevant because there is not much additional information to go on in the logs, but - I have in my /etc/fstab mappings to other partitions - one of which contains the former F9 system (so that I can refer to previous system configs while I tune my F11 system) /home is on its own partition.
Thanks for any help / suggestions....
Mark
On 08/14/2009 04:10 AM, Arthur Dent wrote:
Hello all,
I have just upgraded from F9 to F11 and, still having one or two selinux related problems, decided to do a /.autorelabel.
Knowing how long this can take on my ageing hardware I went off for a cup of tea...
On the screen when I returned (the job had not finished) was: SELinux: Context system_u:object_r:gamin_??? is not valid (left unmapped)
The question marks are mine. I just reached for a pen when another load of messages flashed by and the job finished.
Here is what I found in /var/log/messages:
Context system_u:object_r:gamin_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:pppd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:NetworkManager_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:nscd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:bluetooth_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:squid_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:dovecot_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:kerneloops_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:syslogd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:fail2ban_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:openvpn_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:setroubleshoot_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:rpcbind_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:fsdaemon_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:samba_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:mysqld_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:snmp_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:dnsmasq_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:httpd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:auditd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:ntpd_script_exec_t:s0 is not valid (left unmapped). Context system_u:object_r:squid_var_t:s0 is not valid (left unmapped). Context unconfined_u:object_r:squid_var_t:s0 is not valid (left unmapped).
My question(s):
- Should I be worried?
- Should I do anything?
Note: I don't know if this is relevant because there is not much additional information to go on in the logs, but - I have in my /etc/fstab mappings to other partitions - one of which contains the former F9 system (so that I can refer to previous system configs while I tune my F11 system) /home is on its own partition.
Thanks for any help / suggestions....
Mark
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
The problem is a lot of the scripts were renamed from
DAEMON_script_exec_t to DAEMON_initrc_exec_t
So I think restore is complaining because the previous label has gone away.
If you ls -lZ /etc/init.d/
Look for unlabeled_t or script_exec_t, if you have those you might have a problem.
If they all look like *initrc_exec_t or just initrc_exec_t then you are probably ok.
On Fri, 2009-08-14 at 10:37 -0400, Daniel J Walsh wrote:
On 08/14/2009 04:10 AM, Arthur Dent wrote:
The problem is a lot of the scripts were renamed from
DAEMON_script_exec_t to DAEMON_initrc_exec_t
So I think restore is complaining because the previous label has gone away.
If you ls -lZ /etc/init.d/
Look for unlabeled_t or script_exec_t, if you have those you might have a problem.
If they all look like *initrc_exec_t or just initrc_exec_t then you are probably ok.
This could be my problem:
ls -lZ /etc/init.d/ -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid -rwxr-xr-x. root root system_u:object_r:crond_initrc_exec_t:s0 atd -rwxr-xr-x. root root system_u:object_r:auditd_initrc_exec_t:s0 auditd -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0 avahi-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cups-config-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient -rwxr-xr-x. root root system_u:object_r:dnsmasq_initrc_exec_t:s0 dnsmasq -rwxr-xr-x. root root system_u:object_r:dovecot_initrc_exec_t:s0 dovecot -rwxr-xr-x. root root system_u:object_r:fail2ban_initrc_exec_t:s0 fail2ban -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot -rw-r--r--. root root system_u:object_r:bin_t:s0 functions -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt -rwxr-xr-x. root root system_u:object_r:httpd_initrc_exec_t:s0 httpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd -rwxr-xr-x. root root system_u:object_r:mysqld_initrc_exec_t:s0 mysqld -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 nmb -rwxr-xr-x. root root system_u:object_r:nscd_initrc_exec_t:s0 nscd -rwxr-xr-x. root root system_u:object_r:ntpd_initrc_exec_t:s0 ntpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate -rwxr-xr-x. root root system_u:object_r:openvpn_initrc_exec_t:s0 openvpn -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 portreserve -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond -rwxr-xr-x. root root system_u:object_r:rpcbind_initrc_exec_t:s0 rpcbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd -rwxr-xr-x. root root system_u:object_r:syslogd_initrc_exec_t:s0 rsyslog -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail -rwxr-xr-x. root root system_u:object_r:shorewall_initrc_exec_t:s0 shorewall -rwxr-xr-x. root root system_u:object_r:fsdaemon_initrc_exec_t:s0 smartd -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 smb -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmpd -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmptrapd -rwxr-xr-x. root root system_u:object_r:spamd_initrc_exec_t:s0 spamassassin -rwxr-xr-x. root root system_u:object_r:squid_initrc_exec_t:s0 squid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 transparent-proxying -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 winbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant -rwxr-xr-x. root root system_u:object_r:ypbind_initrc_exec_t:s0 ypbind
Looks OK ... But
ls -lZ /mnt/F9/etc/init.d/ -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 anacron -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 atd -rwxr-xr-x. root root system_u:object_r:auditd_script_exec_t:s0 auditd -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0 avahi-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 bluetooth -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cups-config-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient -rwxr-xr-x. root root system_u:object_r:dnsmasq_script_exec_t:s0 dnsmasq -rwxr-xr-x. root root system_u:object_r:dovecot_script_exec_t:s0 dovecot -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 dund -rwxr-xr-x. root root system_u:object_r:fail2ban_script_exec_t:s0 fail2ban -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firestarter -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot -rwxr-xr-x. root root system_u:object_r:bin_t:s0 functions -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 hsqldb -rwxr-xr-x. root root system_u:object_r:httpd_script_exec_t:s0 httpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irda -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irqbalance -rwxr-xr-x. root root system_u:object_r:kerneloops_script_exec_t:s0 kerneloops -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 microcode_ctl -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd -rwxr-xr-x. root root system_u:object_r:mysqld_script_exec_t:s0 mysqld -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 nmb -rwxr-xr-x. root root system_u:object_r:nscd_script_exec_t:s0 nscd -rwxr-xr-x. root root system_u:object_r:ntpd_script_exec_t:s0 ntpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate -rwxr-xr-x. root root system_u:object_r:openvpn_script_exec_t:s0 openvpn -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 pand -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond -rwxr-xr-x. root root system_u:object_r:rpcbind_script_exec_t:s0 rpcbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd -rwxr-xr-x. root root system_u:object_r:syslogd_script_exec_t:s0 rsyslog -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail -rwxr-xr-x. root root system_u:object_r:setroubleshoot_script_exec_t:s0 setroubleshoot -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 shorewall -rwxr-xr-x. root root system_u:object_r:fsdaemon_script_exec_t:s0 smartd -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 smb -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmpd -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmptrapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 spamassassin -rwxr-xr-x. root root system_u:object_r:squid_script_exec_t:s0 squid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 transparent-proxying -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 winbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ypbind
This is the old F9 partition. Should I try to fix them somehow or just umount the F9 partition and only mount it when I need to peek inside?
Thanks!
Mark
On 08/14/2009 10:49 AM, Arthur Dent wrote:
On Fri, 2009-08-14 at 10:37 -0400, Daniel J Walsh wrote:
On 08/14/2009 04:10 AM, Arthur Dent wrote:
The problem is a lot of the scripts were renamed from
DAEMON_script_exec_t to DAEMON_initrc_exec_t
So I think restore is complaining because the previous label has gone away.
If you ls -lZ /etc/init.d/
Look for unlabeled_t or script_exec_t, if you have those you might have a problem.
If they all look like *initrc_exec_t or just initrc_exec_t then you are probably ok.
This could be my problem:
ls -lZ /etc/init.d/ -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid -rwxr-xr-x. root root system_u:object_r:crond_initrc_exec_t:s0 atd -rwxr-xr-x. root root system_u:object_r:auditd_initrc_exec_t:s0 auditd -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0 avahi-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cups-config-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient -rwxr-xr-x. root root system_u:object_r:dnsmasq_initrc_exec_t:s0 dnsmasq -rwxr-xr-x. root root system_u:object_r:dovecot_initrc_exec_t:s0 dovecot -rwxr-xr-x. root root system_u:object_r:fail2ban_initrc_exec_t:s0 fail2ban -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot -rw-r--r--. root root system_u:object_r:bin_t:s0 functions -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt -rwxr-xr-x. root root system_u:object_r:httpd_initrc_exec_t:s0 httpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd -rwxr-xr-x. root root system_u:object_r:mysqld_initrc_exec_t:s0 mysqld -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 nmb -rwxr-xr-x. root root system_u:object_r:nscd_initrc_exec_t:s0 nscd -rwxr-xr-x. root root system_u:object_r:ntpd_initrc_exec_t:s0 ntpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate -rwxr-xr-x. root root system_u:object_r:openvpn_initrc_exec_t:s0 openvpn -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 portreserve -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond -rwxr-xr-x. root root system_u:object_r:rpcbind_initrc_exec_t:s0 rpcbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd -rwxr-xr-x. root root system_u:object_r:syslogd_initrc_exec_t:s0 rsyslog -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail -rwxr-xr-x. root root system_u:object_r:shorewall_initrc_exec_t:s0 shorewall -rwxr-xr-x. root root system_u:object_r:fsdaemon_initrc_exec_t:s0 smartd -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 smb -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmpd -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmptrapd -rwxr-xr-x. root root system_u:object_r:spamd_initrc_exec_t:s0 spamassassin -rwxr-xr-x. root root system_u:object_r:squid_initrc_exec_t:s0 squid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 transparent-proxying -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 winbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant -rwxr-xr-x. root root system_u:object_r:ypbind_initrc_exec_t:s0 ypbind
Looks OK ... But
ls -lZ /mnt/F9/etc/init.d/ -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 anacron -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 atd -rwxr-xr-x. root root system_u:object_r:auditd_script_exec_t:s0 auditd -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0 avahi-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 bluetooth -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cups-config-daemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient -rwxr-xr-x. root root system_u:object_r:dnsmasq_script_exec_t:s0 dnsmasq -rwxr-xr-x. root root system_u:object_r:dovecot_script_exec_t:s0 dovecot -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 dund -rwxr-xr-x. root root system_u:object_r:fail2ban_script_exec_t:s0 fail2ban -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firestarter -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot -rwxr-xr-x. root root system_u:object_r:bin_t:s0 functions -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 hsqldb -rwxr-xr-x. root root system_u:object_r:httpd_script_exec_t:s0 httpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irda -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irqbalance -rwxr-xr-x. root root system_u:object_r:kerneloops_script_exec_t:s0 kerneloops -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 microcode_ctl -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd -rwxr-xr-x. root root system_u:object_r:mysqld_script_exec_t:s0 mysqld -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 nmb -rwxr-xr-x. root root system_u:object_r:nscd_script_exec_t:s0 nscd -rwxr-xr-x. root root system_u:object_r:ntpd_script_exec_t:s0 ntpd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate -rwxr-xr-x. root root system_u:object_r:openvpn_script_exec_t:s0 openvpn -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 pand -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond -rwxr-xr-x. root root system_u:object_r:rpcbind_script_exec_t:s0 rpcbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd -rwxr-xr-x. root root system_u:object_r:syslogd_script_exec_t:s0 rsyslog -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail -rwxr-xr-x. root root system_u:object_r:setroubleshoot_script_exec_t:s0 setroubleshoot -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 shorewall -rwxr-xr-x. root root system_u:object_r:fsdaemon_script_exec_t:s0 smartd -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 smb -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmpd -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmptrapd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 spamassassin -rwxr-xr-x. root root system_u:object_r:squid_script_exec_t:s0 squid -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 transparent-proxying -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 winbind -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ypbind
This is the old F9 partition. Should I try to fix them somehow or just umount the F9 partition and only mount it when I need to peek inside?
Well it is up to you. One option would be to use a mount context when you mount the partion, which would override and ignore the F9 labels. Either way I don't think it will cause you much problems.
Thanks!
Mark
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
On Fri, 2009-08-14 at 11:00 -0400, Daniel J Walsh wrote:
On 08/14/2009 10:49 AM, Arthur Dent wrote:
[snip]
This is the old F9 partition. Should I try to fix them somehow or just umount the F9 partition and only mount it when I need to peek inside?
Well it is up to you. One option would be to use a mount context when you mount the partion, which would override and ignore the F9 labels.
Well that sounds like a plan! How best to do it? Is it as simple as putting this in fstab? (apologies for the line-wrap)
/dev/sda6 /mnt/F9 ext3r rootcontext="system_u:object_r:initrc_exec_t:s0" defaults 0 0
Is that right?
Thanks!
Mark
On 08/14/2009 01:34 PM, Arthur Dent wrote:
On Fri, 2009-08-14 at 11:00 -0400, Daniel J Walsh wrote:
On 08/14/2009 10:49 AM, Arthur Dent wrote:
[snip]
This is the old F9 partition. Should I try to fix them somehow or just umount the F9 partition and only mount it when I need to peek inside?
Well it is up to you. One option would be to use a mount context when you mount the partion, which would override and ignore the F9 labels.
Well that sounds like a plan! How best to do it? Is it as simple as putting this in fstab? (apologies for the line-wrap)
/dev/sda6 /mnt/F9 ext3r rootcontext="system_u:object_r:initrc_exec_t:s0" defaults 0 0
Is that right?
Thanks!
Mark
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Just use context, not rootcontext.
And I do not think you want everything on F9 to look like initrc_t. I guess I would label it all nfs_t, to make it look like a remote system, or usr_t to make it look generic.
selinux@lists.fedoraproject.org