Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
On Wed, Jan 23, 2013 at 10:11 PM, Bruno Wolff III br...@wolff.to wrote: To reboot I need to use the enforcing=0 kernel parameter. Switch to enforcing after booting seems to work. This is filed as bug 903486 (https://bugzilla.redhat.com/show_bug.cgi?id=903486). I have also tried the selinux build from today and see the same thing, so tomorrow's rawhide will have the same problem. -- Interesting I have the latest koji/Rawhide packages installed, and I get no AVCs booting in permissive mode. Boots fine for me in enforcing mode. Here are possibly related packages: [root@tlondon ~]# getenforce Enforcing [root@tlondon ~]# dmesg | grep avc [root@tlondon ~]# rpm -qa \*selinux\* \*policycore\* \*semanage\* kernel libselinux-debuginfo-2.1.12-16.fc19.x86_64 selinux-policy-targeted-3.12.1-6.fc19.noarch selinux-policy-devel-3.12.1-6.fc19.noarch libsemanage-python-2.1.9-4.fc19.x86_64 selinux-policy-3.12.1-6.fc19.noarch policycoreutils-devel-2.1.13-56.fc19.x86_64 libselinux-utils-2.1.12-18.fc19.x86_64 libsemanage-2.1.9-4.fc19.x86_64 policycoreutils-python-2.1.13-56.fc19.x86_64 policycoreutils-gui-2.1.13-56.fc19.x86_64 selinux-policy-doc-3.12.1-6.fc19.noarch libselinux-2.1.12-18.fc19.x86_64 libselinux-devel-2.1.12-18.fc19.x86_64 kernel-3.8.0-0.rc4.git3.2.fc19.x86_64 libselinux-python-2.1.12-18.fc19.x86_64 policycoreutils-sandbox-2.1.13-56.fc19.x86_64 policycoreutils-2.1.13-56.fc19.x86_64 [root@tlondon ~]# tom -- Tom London -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
[rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
On Thu, 24 Jan 2013 00:11:31 -0600 Bruno Wolff III br...@wolff.to wrote: To reboot I need to use the enforcing=0 kernel parameter. Switch to enforcing after booting seems to work. This is filed as bug 903486 (https://bugzilla.redhat.com/show_bug.cgi?id=903486). I have also tried the selinux build from today and see the same thing, so tomorrow's rawhide will have the same problem. Odd. I rebooted yesterday afternoon fine. Was this with todays rawhide updates applied? kevin signature.asc Description: PGP signature -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/24/2013 10:10 AM, Kevin Fenzi wrote: On Thu, 24 Jan 2013 00:11:31 -0600 Bruno Wolff III br...@wolff.to wrote: To reboot I need to use the enforcing=0 kernel parameter. Switch to enforcing after booting seems to work. This is filed as bug 903486 (https://bugzilla.redhat.com/show_bug.cgi?id=903486). I have also tried the selinux build from today and see the same thing, so tomorrow's rawhide will have the same problem. Odd. I rebooted yesterday afternoon fine. Was this with todays rawhide updates applied? kevin Update libselinux. There was a new bug in libselinux that was causing systemd to label stuff incorrectly, it is fixed in the current libselinux in rawhide. libselinux-2.1.12-18.fc19 Sorry for the breakage. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEBU/YACgkQrlYvE4MpobODUQCbBR1f67eUE7Q+UbBCBxRDTzom sHYAn0A4sucN1KA72CjXm7eQYL9agFgz =7cwj -END PGP SIGNATURE- -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
On Thu, 24 Jan 2013 10:32:06 -0500 Daniel J Walsh dwa...@redhat.com wrote: Update libselinux. There was a new bug in libselinux that was causing systemd to label stuff incorrectly, it is fixed in the current libselinux in rawhide. libselinux-2.1.12-18.fc19 Sorry for the breakage. Is there any way we could catch these before they land in rawhide the next day? Perhaps some early testers could pick it out of koji after it's built? kevin signature.asc Description: PGP signature -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
On Thu, 24 Jan 2013 09:35:03 -0700 Kevin Fenzi ke...@scrye.com wrote: On Thu, 24 Jan 2013 10:32:06 -0500 Daniel J Walsh dwa...@redhat.com wrote: Perhaps some early testers could pick it out of koji after it's built? kevin I usually do, I run pure koji, but got sidetracked. -- Regards, Frank ln -s http//www.frankly3d.com http://www.frankly3d.eu -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/24/2013 11:35 AM, Kevin Fenzi wrote: On Thu, 24 Jan 2013 10:32:06 -0500 Daniel J Walsh dwa...@redhat.com wrote: Update libselinux. There was a new bug in libselinux that was causing systemd to label stuff incorrectly, it is fixed in the current libselinux in rawhide. libselinux-2.1.12-18.fc19 Sorry for the breakage. Is there any way we could catch these before they land in rawhide the next day? Perhaps some early testers could pick it out of koji after it's built? kevin Well we did test this but not on a reboot, actually found the problem early in the morning and fixed it but rawhide had already pushed. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEBj3UACgkQrlYvE4MpobOg0gCdFIgl3o67ph/VqAY5P+a23NVl q7sAoJN6t7as49UUN20OstDKbpaYCciU =cz2o -END PGP SIGNATURE- -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/24/2013 03:26 PM, Bruno Wolff III wrote: On Thu, Jan 24, 2013 at 14:45:57 -0500, Daniel J Walsh dwa...@redhat.com wrote: Well we did test this but not on a reboot, actually found the problem early in the morning and fixed it but rawhide had already pushed. I didn't think to check for a pending libselinux update and just tested the pending selinux-policy update. Anyway the libselinux update does fix things. Thanks for getting that fix out quickly. No problem, and sorry for breaking rawhide in the first place. BTW I have been running rawhide for years... -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlEBoFkACgkQrlYvE4MpobPiiwCfUHiRACWOQyHVRc2++cZ1aplt VBgAnA/6w2RGumupg9bve/29rzKmshgS =aI3h -END PGP SIGNATURE- -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Re: [rawhide] Re: Rawhide heads up: Booting in enforcing mode doesn't seem to work
On Thu, 24 Jan 2013 14:45:57 -0500 Daniel J Walsh dwa...@redhat.com wrote: Well we did test this but not on a reboot, actually found the problem early in the morning and fixed it but rawhide had already pushed. Would changing the time on rawhide help catch these any better? or it doesn't matter? kevin signature.asc Description: PGP signature -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test
Rawhide heads up: Booting in enforcing mode doesn't seem to work
To reboot I need to use the enforcing=0 kernel parameter. Switch to enforcing after booting seems to work. This is filed as bug 903486 (https://bugzilla.redhat.com/show_bug.cgi?id=903486). I have also tried the selinux build from today and see the same thing, so tomorrow's rawhide will have the same problem. -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin.fedoraproject.org/mailman/listinfo/test