Red Hat Bugzilla – Bug 158425
selinux policy reload hangs the kernel
Last modified: 2015-01-04 17:19:48 EST
Description of problem:
When installing FC4-re0520.0 with selinux targeted policy enabled, when we
install selinux-policy-targeted, an oops makes it to the console. Later on,
when we install selinux-policy-targeted-sources, the policy is reloaded and then
the system freezes hard. If we choose not to install
selinux-policy-targeted-sources, the hard freeze happens during the installer's
final configuration stage.
Install succeeds booting the installer with selinux=0, but then, if you
re-enable selinux in /etc/sysconfig/selinux, touch /.autorelabel, and reboot,
the system will fail to boot with kernel oopses very early during the boot.
I've taken some pictures of the oopses, which I'll attach upon request.
Version-Release number of selected component (if applicable):
Always, both x86_64 and i686
Steps to Reproduce:
1.Boot kernel 2.6.11-1.1329_FC4 with selinux targeted policy in enforcing mode
sure, please attach the oopses.
also give the latest kernel a try (-1337 right now), and see if that fixes it
Created attachment 114682 [details]
oops from text-mode install, after installing selinux-policy-targeted
On a text install, without selinux=0, an oops is displayed while running the
selinux-policy-targeted %post. The install proceeds, so the screen gets
somewhat garbled, but I hope the critical info from the oops is still there.
Created attachment 114683 [details]
bottom of the oops at boot-up for relabel
When booting up for relabel, I think a number of oopses is displayed, but they
roll off the screen too fast for me to even count them. Sorry about the poor
picture quality, it was the best of 3 I took after it froze :-(
Looks like 1337 is fixed.