Bug 446972 - default selinux hangs system while running livecd-creator
Summary: default selinux hangs system while running livecd-creator
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: LiveCD
Version: 9
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Jeremy Katz
QA Contact:
URL:
Whiteboard:
Depends On: 429813 445630
Blocks:
TreeView+ depends on / blocked
 
Reported: 2008-05-16 19:41 UTC by Pedro Silva
Modified: 2013-01-10 04:42 UTC (History)
1 user (show)

Fixed In Version: 0.17.1
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2008-07-03 00:40:48 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
First warning (3.02 KB, text/plain)
2008-05-16 19:41 UTC, Pedro Silva
no flags Details
Second warning (2.74 KB, text/plain)
2008-05-16 19:43 UTC, Pedro Silva
no flags Details

Description Pedro Silva 2008-05-16 19:41:59 UTC
Description of problem:

Running with default selinux targeted policies, while running livecd-creator,
the system hangs. The system was running firefox, evolution and the
livecd-creator process.

setroubleshoot warns me a few times during the livecd-creator process. 

livcecd-creator downloads packages, installs them, warnings start and near the
end of install packages the system hangs and I have to reset the machine.

Version-Release number of selected component (if applicable):

selinux-policy-targeted-3.3.1-42.fc9.noarch

How reproducible:

Install fedora 9 using default selinux options.

run: livecd-creator --config=liveusb-f9.ks --fslabel=myfedora
  
Actual results:

System hangs during livecd-creator process, during package install.

Expected results:

livecd-creator process sucessfully finishs.

Additional info:

Attachments contain two selinux warnings registered by selinuxtroubleshooter.

Comment 1 Pedro Silva 2008-05-16 19:41:59 UTC
Created attachment 305733 [details]
First warning

Comment 2 Pedro Silva 2008-05-16 19:43:30 UTC
Created attachment 305735 [details]
Second warning

Comment 3 Daniel Walsh 2008-05-16 20:50:47 UTC
You must put the machine in permissive mode while using livecd creator.  We are
working hard to fix this problem.

Steps to create the livecd

#setenforce 0
livecd_creator ...
#load_policy
#setenforce 1

Sometimes you might require a reboot.

Comment 4 Pedro Silva 2008-05-16 22:36:16 UTC
Thank you for your quick response. I linked this bug wih #429813 since they seem
to be related. I didn't link it to #445630 since I do think that livecd-creator
should work under targeted selinux policies.

Comment 5 Daniel Walsh 2008-07-02 19:35:05 UTC
SELinux policy has been updated to handle this.  A patch has been submitted to
livecd to handle this properly.

Fixed in selinux-policy-3.3.1-72.fc9.noarch

Comment 6 Jeremy Katz 2008-07-03 00:40:48 UTC
livecd-tools for F9 has been pushed and rawhide is in git -- testers from git
appreciated as more indicators to do a rawhide build.  Worst case, I'll be doing
one the end of next week for the alpha freeze


Note You need to log in before you can comment on or make changes to this bug.