selinux-policy-mls-2.4.5-3.fc7 When running "telinit 1" with the MLS policy on: Telling INIT to go to single user mode avc: denied { execute } for pid=2537 comm="S99single" name="init" dev=dm-0 ino=1998956 scontext=system_u:system_r:initrc_t:s0-s15:c0.c1023 tcontext=system_u:object_r:init_exec_t:s0 tclass=file avc: denied { read } for pid=2537 comm="S99single" name="init" dev=dm-0 ino=1998956 scontext=system_u:system_r:initrc_t:s0-s15:c0.c1023 tcontext=system_u:object_r:init_exec_t:s0 tclass=file avc: denied { execute_no_trans } for pid=2537 comm="S99single" name="init" dev=dm-0 ino=1998956 scontext=system_u:system_r:initrc_t:s0-s15:c0.c1023 tcontext=system_u:object_r:init_exec_t:s0 tclass=file INIT: Going single user INIT: Sending processes the TERM signal INIT: Sending processes the KILL signal
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux major release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Major release. This request is not yet committed for inclusion.
Fixed in selinux-policy-2.4.5-4.el5
QE ack for RHEL5. Please retest with the latest RHEL5 selinux-policy package.
A package has been built which should help the problem described in this bug report. This report is therefore being closed with a resolution of CURRENTRELEASE. You may reopen this bug report if the solution does not work for you.