Bug 1115657

Summary: Can't log in as liveuser in mode 3 in Fedora-Live-Xfce-x86_64-rawhide-20140702.iso
Product: [Fedora] Fedora Reporter: Peter H. Jones <jones.peter.busi>
Component: auditAssignee: Steve Grubb <sgrubb>
Status: CLOSED NOTABUG QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: sgrubb
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-12-07 18:31:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
typescript of console none

Description Peter H. Jones 2014-07-02 20:50:53 UTC 
Created attachment 914302 [details]
typescript of console

Description of problem:


Version-Release number of selected component (if applicable):
See https://kojipkgs.fedoraproject.org//work/tasks/8984/7098984/root.log

How reproducible:

Steps to Reproduce:
1. Download and boot https://kojipkgs.fedoraproject.org//work/tasks/8984/7098984/Fedora-Live-Xfce-x86_64-rawhide-20140702.iso

2. Use TAB to edit boot line: remove rhgb and quiet, add "console=ttyS0 enforcing=0 3"
3. Hit Enter to boot
4. When login prompt appears, try to log in as liveuser with no password

Actual results:

1.Messages like:
"audit: type=1400 audit(1404314449.657:3): avc:  denied  { read } for  pid=571 comm="systemd-sysctl" name="ld.so.cache" dev="dm-0" ino=48924 scontext=system_u:system_r:systemd_sysctl_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1" in the console log.

2. Log in as liveuser fails.

3. Log in a root, no password succeeds. Can display dmesg and contents of /var/log/messages on screen, but this output is not sent to ttyS0.

Expected results:
No errors
Comment 1 Steve Grubb 2014-07-02 20:57:21 UTC 
This does not look like an audit problem. Not sure which subsystem to transfer the bug to. But the AVC mentions that it can't access a file with unlabeled_t. That is the problem. Where ever that file came from, it was created with selinux disabled. The file system needs relabeling.

This is not an audit bug.
Comment 2 Steve Grubb 2014-12-07 18:31:28 UTC 
Closing per comment #1.