[Arm-dev] SElinux st failed

[Robert Moskowitz]

On 12/23/2016 10:07 AM, Gordan Bobic wrote:
> Do you have selinux-policy and selinux-policy-targeted packages installed?

Yes they are both installed in the base image.  And when I do a yum 
update after installing chrony, I see:

[  505.622712] SELinux:  Class binder not defined in policy.
[  505.628184] SELinux: the above unknown classes and permissions will 
be allowed
[  509.043371] SELinux:  Context 
unconfined_u:unconfined_r:sandbox_t:s0-s0:c0.c1023 became invalid 
(unmapped).
[  510.548875] SELinux:  Context 
system_u:unconfined_r:sandbox_t:s0-s0:c0.c1023 became invalid (unmapped).

Don't know if these are a problem or not...

Now on to try Fabian's recommendations.


>
> On Fri, Dec 23, 2016 at 2:58 PM, Fabian Arrotin <arrfab at centos.org 
> <mailto:arrfab at centos.org>> wrote:
>
>     On 23/12/16 02:49, Robert Moskowitz wrote:
>     > This is on a Cubieboard2 with the OS on a sata HD:
>     >
>     > I followed the instructions on the wiki
>     >
>     > vi /etc/sysconfig/selinux <- change from "permissive" to "enforcing"
>     > vi /boot/extlinux/extlinux.conf <- change the "enforce=0" to
>     "enforce=1"
>     > touch /.autorelabel
>     >
>     > I then rebooted and the following appears on the console log:
>     >
>     > [  OK  ] Reached target Switch Root.
>     >          Starting Switch Root...
>     > [   10.682159] systemd-journald[129]: Received SIGTERM from PID 1
>     > (systemd).
>     > [   11.306507] systemd[1]: Failed to load SELinux policy.
>     > [!!!!!!] Failed to load SELinux policy, freezing.
>     >
>     >
>     > Note that /boot is sda1 and / is sda3
>     >
>     > I am awaiting guidance.
>     >
>     > thank you
>     >
>
>     Hmm, the way I do it is :
>     - ensure enforce=1 in extlinux.conf (but keep
>     /etc/sysconfig/selinux to
>     permissive)
>     - touch /.autorelabel && systemc reboot
>
>     Than wait and when it's finally online, "setenforce 1" and then
>     /etc/sysconfig/selinux to enforcing
>
>     --
>     Fabian Arrotin
>     The CentOS Project | http://www.centos.org
>     gpg key: 56BEC54E | twitter: @arrfab
>
>
>     _______________________________________________
>     Arm-dev mailing list
>     Arm-dev at centos.org <mailto:Arm-dev at centos.org>
>     https://lists.centos.org/mailman/listinfo/arm-dev
>     <https://lists.centos.org/mailman/listinfo/arm-dev>
>
>
>
>
> _______________________________________________
> Arm-dev mailing list
> Arm-dev at centos.org
> https://lists.centos.org/mailman/listinfo/arm-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/arm-dev/attachments/20161223/4b197983/attachment-0001.html>