Mailinglist Archive: opensuse-factory (549 mails)
| < Previous | Next > |
Re: [opensuse-factory] Enabling SELINUX failed
- From: Thomas Biege <thomas@xxxxxxxxxx>
- Date: Thu, 12 Nov 2009 11:44:57 +0100
- Message-id: <200911121144.57907.thomas@xxxxxxxxxx>
Hello Marco,
I installed the 11.2 from http://download.opensuse.org/distribution/11.2
on my laptop yesterday evening (CET) with the following packages:
- selinux-tools
- selinux-policy
- selinux-policy-refpolicy-standard
- libselinux*
- libsemanage*
- policycoreutils
- checkpolicy
I use kernel 2.6.31.5-0.1-desktop from 2009-10-26 and used
'yast2 bootloader'->Edit to activate the checkbox 'Enable SELinux'
After rebooting 'sestatus' showed that selinux was enabled.
If this is not true for your setup run 'selinux-ready' as root
and verify the output. This script is in package selinux-tools.
It is true that some code does not work with SELinux enabled
because we do not officially support SELinux but just "make
it run". Nothing more, nothing less. :)
You can submit bug reports and put me in CC to make this situation
change for 11.2's successor. Thanks.
Bye
Thomas
On Mittwoch 11 November 2009 16:46:39 Marco Calistri wrote:
--
Thomas Biege <thomas@xxxxxxxxxx>, SUSE LINUX, Security Support & Auditing
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
I installed the 11.2 from http://download.opensuse.org/distribution/11.2
on my laptop yesterday evening (CET) with the following packages:
- selinux-tools
- selinux-policy
- selinux-policy-refpolicy-standard
- libselinux*
- libsemanage*
- policycoreutils
- checkpolicy
I use kernel 2.6.31.5-0.1-desktop from 2009-10-26 and used
'yast2 bootloader'->Edit to activate the checkbox 'Enable SELinux'
After rebooting 'sestatus' showed that selinux was enabled.
If this is not true for your setup run 'selinux-ready' as root
and verify the output. This script is in package selinux-tools.
It is true that some code does not work with SELinux enabled
because we do not officially support SELinux but just "make
it run". Nothing more, nothing less. :)
You can submit bug reports and put me in CC to make this situation
change for 11.2's successor. Thanks.
Bye
Thomas
On Mittwoch 11 November 2009 16:46:39 Marco Calistri wrote:
On Mon 26 Oct 2009 at 11:31:49 (-0300 UTC), Marco Calistri wrote:
Hello Listmates,
I attempted to enable selinux on my 11.2 Rc1 but it fails with the
error: no selinuxfs found.
I followed the "how-to" as per en.opensuse.selinux but it seems
something is lacking from my understanding, or perhaps from current
kernel.
Suggestions are welcomed.
Cheers,
Folks,
That keeps failing as well onto 11.2 RC1.
If also disabling selinux at boot, with selinux=0, then
gnome-system-monitor fails to start, claiming a selinux issue.
BR,
--
Thomas Biege <thomas@xxxxxxxxxx>, SUSE LINUX, Security Support & Auditing
SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx
| < Previous | Next > |