Hi,
Now, I have a problem with selinux that I can't figure out. It boots properly in enforcing mode, but won't let anyone login:
[ 25.346263] SELinux: Context system_u:unconfined_r:kernel_t:s0 would be invalid if enforcing
Booting with enforcing=0 enables root to login. How can I fix this?
First step is to try relabelling.
Something is reall screwed up. I would do
# yum reinstall selinux-policy-targeted # touch /.autorelabel; reboot
I should have mentioned that I did relabel and it didn't make any difference.
I did find this post:
https://bugzilla.redhat.com/show_bug.cgi?id=443569
and it mentioned running "semanage login -m -s unconfined_u __default__". This enabled me to login once again, but there are now other errors:
[ 9.718499] type=1400 audit(1299611791.043:3): avc: denied { mmap_zero } for pid=670 comm="vbetool" scontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tcontext=system_u:system_r:vbetool_t:s0-s0:c0.c1023 tclass=memprotect [ 14.847056] type=1400 audit(1299611796.172:4): avc: denied { write } for pid=839 comm="system-setup-ke" name="00-system-setup-keyboard.conf" dev=sda1 ino=3414111 scontext=system_u:system_r:keyboardd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
Suggestions for correcting these errors?
There was also this error that occurred after just installing munin:
Mar 8 14:42:30 gary setroubleshoot: SELinux is preventing /usr/sbin/httpd from search access on the directory /etc/munin. For complete SELinux messages. run sealert -l 7cfb6635-60f5-4f85-9e93-081af231b418
Should that have happened?
Thanks, Alex