[opensuse-factory] Enabling SELINUX failed

Hello Listmates, I attempted to enable selinux on my 11.2 Rc1 but it fails with the error: no selinuxfs found. I followed the "how-to" as per en.opensuse.selinux but it seems something is lacking from my understanding, or perhaps from current kernel. Suggestions are welcomed. Cheers, -- Marco Calistri <amdturion> If it happens once, it's a bug. If it happens twice, it's a feature. If it happens more than twice, it's a design philosophy. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

On Mon 26 Oct 2009 at 11:31:49 (-0300 UTC), Marco Calistri wrote:
Folks, That keeps failing as well onto 11.2 RC1. If also disabling selinux at boot, with selinux=0, then gnome-system-monitor fails to start, claiming a selinux issue. BR, -- Marco Calistri -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

Hello Marco, I installed the 11.2 from http://download.opensuse.org/distribution/11.2 on my laptop yesterday evening (CET) with the following packages: - selinux-tools - selinux-policy - selinux-policy-refpolicy-standard - libselinux* - libsemanage* - policycoreutils - checkpolicy I use kernel 2.6.31.5-0.1-desktop from 2009-10-26 and used 'yast2 bootloader'->Edit to activate the checkbox 'Enable SELinux' After rebooting 'sestatus' showed that selinux was enabled. If this is not true for your setup run 'selinux-ready' as root and verify the output. This script is in package selinux-tools. It is true that some code does not work with SELinux enabled because we do not officially support SELinux but just "make it run". Nothing more, nothing less. :) You can submit bug reports and put me in CC to make this situation change for 11.2's successor. Thanks. Bye Thomas On Mittwoch 11 November 2009 16:46:39 Marco Calistri wrote:
-- Thomas Biege <thomas@novell.com>, SUSE LINUX, Security Support & Auditing SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

On Thu 12 Nov 2009 at 8:44:57 (-0300 UTC), Thomas Biege wrote:
Hello Thomas, Thanks for these infos! I will check it again; I think I have not installed libsemanage though. My 11.2 comes from several dist-updates, starting from the various milestones, it's not a fresh installation. Cheers, Marco
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

On Mon 26 Oct 2009 at 11:31:49 (-0300 UTC), Marco Calistri wrote:
Folks, That keeps failing as well onto 11.2 RC1. If also disabling selinux at boot, with selinux=0, then gnome-system-monitor fails to start, claiming a selinux issue. BR, -- Marco Calistri -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

Hello Marco, I installed the 11.2 from http://download.opensuse.org/distribution/11.2 on my laptop yesterday evening (CET) with the following packages: - selinux-tools - selinux-policy - selinux-policy-refpolicy-standard - libselinux* - libsemanage* - policycoreutils - checkpolicy I use kernel 2.6.31.5-0.1-desktop from 2009-10-26 and used 'yast2 bootloader'->Edit to activate the checkbox 'Enable SELinux' After rebooting 'sestatus' showed that selinux was enabled. If this is not true for your setup run 'selinux-ready' as root and verify the output. This script is in package selinux-tools. It is true that some code does not work with SELinux enabled because we do not officially support SELinux but just "make it run". Nothing more, nothing less. :) You can submit bug reports and put me in CC to make this situation change for 11.2's successor. Thanks. Bye Thomas On Mittwoch 11 November 2009 16:46:39 Marco Calistri wrote:
-- Thomas Biege <thomas@novell.com>, SUSE LINUX, Security Support & Auditing SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org

On Thu 12 Nov 2009 at 8:44:57 (-0300 UTC), Thomas Biege wrote:
Hello Thomas, Thanks for these infos! I will check it again; I think I have not installed libsemanage though. My 11.2 comes from several dist-updates, starting from the various milestones, it's not a fresh installation. Cheers, Marco
-- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (3)
-
Cristian Rodríguez
-
Marco Calistri
-
Thomas Biege