Bug 444772
| Summary: | SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.23, searching for an older version. | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Sami Farin <hvtaifwkbgefbaei> |
| Component: | selinux-policy-targeted | Assignee: | Daniel Walsh <dwalsh> |
| Status: | CLOSED NOTABUG | QA Contact: | Ben Levenson <benl> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 9 | CC: | yangchuanqing2008 |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-07-02 20:35:57 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Sami Farin
2008-04-30 15:03:38 UTC
Have you upgraded to the latest kernel? You should be able to remove all of the policy files except for 23. But you need to have the latest kernel and initrd setup. No, I do not have latest kernel or initrd. I have only latest kernel that works. Nothing about such things are in the dependencies of selinux-policy. load_policy says nothing related to any kernel versions or initrd. I downgraded to selinux-policy-targeted-3.0.8-44.fc8, it had policy.21, I try again: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.21, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.23: No such file or directory load_policy: Can't load policy: No such file or directory Uh oh, well I ran "load_policy -i" , seems to last for some hours... does not tell what it is doing, or estimates about completion... yes I could sysrq+w or reboot... Oh now it finished. SELinux: policy loaded with handle_unknown=allow All this black magic... a bit over my head, though I have used Linux only for 14 years. You are running rawhide, so the kernel/upstart/selinux policy/SysVinit/libselinux/libsepol/checkpolicy/libsemanage have all upgraded. I have no idea why the latest rawhide soon to be Fedora 9 kernel will not work on your machine, but I know that all of the latest stuff will not work properly with a very old kernel/initrd. Changing version to '9' as part of upcoming Fedora 9 GA. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping just make the /etc/selinux/config ********************************************************************* # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=permissive # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted ********************************************************************* and then #init 6; waitting unitl you have 3 cups of coffee so login and do #sestatus if it shows disable you can run #load_policy -qi just V ing.... |