initscripts-8.29-1 installed, did this: #SELINUX=enforcing in /etc/selinux/config touch /.autorelabel reboot After relabeling during boot, got an error message involving "echo" and line 74 in /etc/rc.sysinit, saying IIRC "invalid argument". After that when the bootup finished, I noticed that SELinux was not in enforcing mode (implicitly, because X started fine, see bug 179656). Line 74 is: echo $SELINUX > $selinuxfs/enforce Many things in /etc/rc.sysinit do [ -n "$SELINUX" ] tests before doing stuff, maybe that should be done in relabel_selinux() too?
... if [ -n "$SELINUX" ]; then if [ -f /.autorelabel ] || strstr "$cmdline" autorelabel ; then relabel_selinux fi ... So it should be set.
Hm, indeed, so it's not unset. But hey, look what happens in relabel_selinux(): . /etc/selinux/config # note: results in SELINUX=enforcing [...] echo "0" > $selinuxfs/enforce [...] echo $SELINUX > $selinuxfs/enforce ...and testing that from the console: # echo enforcing > /selinux/enforce bash: echo: write error: Invalid argument
Haha. See a few lines above: . /etc/selinux/config Read that file. I suppose we need to pick a different variable in rc.sysinit.
Yes, that's what I implied in comment 2 ;)
OK, I'm blind today. Sorry. Fixed in CVS, will show up eventually.
*** Bug 182409 has been marked as a duplicate of this bug. ***