Bug 557744 - Modification of SELinux script.
Summary: Modification of SELinux script.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: dracut
Version: 12
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Harald Hoyer
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-01-22 13:28 UTC by Daniel Walsh
Modified: 2010-01-28 00:54 UTC (History)
3 users (show)

Fixed In Version: 004-4.fc12
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-01-28 00:54:33 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)
Patch to force permissive mode if /.autorelabel is present (438 bytes, patch)
2010-01-22 13:28 UTC, Daniel Walsh
no flags Details | Diff

Description Daniel Walsh 2010-01-22 13:28:47 UTC
Created attachment 386140 [details]
Patch to force permissive mode if /.autorelabel is present

One problem we have in RHEL5 is autorelabel on a totally unlabeled machine does not work.  The reason for this is init or other programs blow up because their shared libraries are not labeled (file_t).  So tools like restorecon are not allowed to run.  The machine really should be in permissive mode until the relabelling is complete.  I would like to modify dracut selinux script to force permissive mode if the /.autorelabel flag is set.

Comment 1 Fedora Update System 2010-01-26 10:50:02 UTC
dracut-004-4.fc12 has been submitted as an update for Fedora 12.
http://admin.fedoraproject.org/updates/dracut-004-4.fc12

Comment 2 Fedora Update System 2010-01-27 01:07:02 UTC
dracut-004-4.fc12 has been pushed to the Fedora 12 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update dracut'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F12/FEDORA-2010-1088

Comment 3 Fedora Update System 2010-01-28 00:52:23 UTC
dracut-004-4.fc12 has been pushed to the Fedora 12 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.