Mailinglist Archive: opensuse-factory (549 mails)

< Previous Next >
Re: [opensuse-factory] Enabling SELINUX failed
  • From: Marco Calistri <marco.calistri@xxxxxxxxxxxx>
  • Date: Thu, 12 Nov 2009 12:49:16 -0200
  • Message-id: <4AFC206C.4030303@xxxxxxxxxxxx>
On Thu 12 Nov 2009 at 8:44:57 (-0300 UTC), Thomas Biege wrote:
Hello Marco,

I installed the 11.2 from http://download.opensuse.org/distribution/11.2
on my laptop yesterday evening (CET) with the following packages:
- selinux-tools
- selinux-policy
- selinux-policy-refpolicy-standard
- libselinux*
- libsemanage*
- policycoreutils
- checkpolicy

I use kernel 2.6.31.5-0.1-desktop from 2009-10-26 and used
'yast2 bootloader'->Edit to activate the checkbox 'Enable SELinux'

After rebooting 'sestatus' showed that selinux was enabled.

If this is not true for your setup run 'selinux-ready' as root
and verify the output. This script is in package selinux-tools.

It is true that some code does not work with SELinux enabled
because we do not officially support SELinux but just "make
it run". Nothing more, nothing less. :)
You can submit bug reports and put me in CC to make this situation
change for 11.2's successor. Thanks.

Bye
Thomas


Hello Thomas,

Thanks for these infos!
I will check it again; I think I have not installed libsemanage though.

My 11.2 comes from several dist-updates, starting from the various
milestones, it's not a fresh installation.

Cheers,

Marco

On Mittwoch 11 November 2009 16:46:39 Marco Calistri wrote:
On Mon 26 Oct 2009 at 11:31:49 (-0300 UTC), Marco Calistri wrote:
Hello Listmates,

I attempted to enable selinux on my 11.2 Rc1 but it fails with the
error: no selinuxfs found.

I followed the "how-to" as per en.opensuse.selinux but it seems
something is lacking from my understanding, or perhaps from current
kernel.

Suggestions are welcomed.

Cheers,
Folks,

That keeps failing as well onto 11.2 RC1.
If also disabling selinux at boot, with selinux=0, then
gnome-system-monitor fails to start, claiming a selinux issue.

BR,




--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx

< Previous Next >