Created attachment 704787 [details] rawhide-20130303-at-first-boot-failed-to-start-system-logging-service.png - Boot qemu-kvm with Fedora-18-x86_64-netinst.iso qemu-kvm command line was: ionice -c 3 qemu-kvm -enable-kvm -m 2048M -smp 4 -drive file=./Fedora-rawhide-20130303-x86_64-installed-with-f18-netinst-installer.qcow2,index=0,media=disk,cache=unsafe -localtime -serial file:/tmp/qemu-Fedora-rawhide-20130303-x86_64-installed-with-f18-netinst-installer.qcow2-output.log -name Fedora-rawhide-20130303-x86_64-installed-with-f18-netinst-installer.qcow2 -cdrom /local/mfabian/iso/Fedora-18-release/Fedora-18-x86_64-netinst.iso -boot d -vga std -display sdl -net nic -net user,hostname=Fedora-rawhide-20130303-x86_64-installed-with-f18-netinst-installer.qcow2,hostfwd=tcp::5557-:22 -monitor stdio -usb - change Netinstall URL to: http://ftp-stud.hs-esslingen.de/pub/fedora/linux/development/rawhide/x86_64/os/ - select Gnome desktop in software selection - change timezone to Europe/Berlin - use whole disk - proceed with installation At first boot, the start of “rsyslog” fails. Starting “rsyslog” is retried endlessly, the system never finishes booting. See screenshot.
Created attachment 704793 [details] rawhide-20130303-at-first-boot-after-removing-rsyslog.png Trying what happens when removing rsyslog: - booting to runlevel 1 - rpm -e rsyslog - reboot The system still does not boot up, many other failures see screenshot attached here.
Perhaps you can try running selinux in permissive mode that seems to make things better for me.
Yes, this seems to help. I still had that qemu image and booted it again now, adding enforcing=0 to the command line at boot. Now it boots without problems up to the “Oh no! Something has gone wrong.” screen from gnome.
What avc messages are you seeing? ausearch -m avc -ts today
[root@Fedora-rawhide-20130311-x86_64-i ~]# ausearch -m avc -ts today <no matches> [root@Fedora-rawhide-20130311-x86_64-i ~]# This is after booting with enforcing=0 at the time when the “Oh no! Something has gone wrong.” screen is shown. Maybe I misunderstood?
at the time when the “Oh no! Something has gone wrong.” screen is shown. is not related to SELinux, I don't believe. Strange that you are not seeing any AVC messages for the rsyslog problem.
Oh, sorry, I tried the wrong image in comment#5, a newer one (20130311). With the 20130303 image and booting with enforcing=0 I get at the time when the “Oh no! Something has gone wrong.” screen is shown (I’ll attach the complete output ...): [root@Fedora-rawhide-20130303-x86_64-i ~]# ausearch -m avc -ts today | tail type=SYSCALL msg=audit(1363066895.665:420): arch=c000003e syscall=42 success=no exit=-2 a0=4 a1=7fffa5504b30 a2=6e a3=656e69666e6f636e items=0 ppid=1129 pid=1679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1363066895.665:420): avc: denied { read } for pid=1679 comm="sshd" name="run" dev="dm-1" ino=1177399 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=lnk_file ---- time->Tue Mar 12 06:41:35 2013 type=SYSCALL msg=audit(1363066895.691:422): arch=c000003e syscall=42 success=no exit=-2 a0=1f a1=7fff1c0ab340 a2=6e a3=20a54b0 items=0 ppid=1 pid=539 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 ses=4294967295 tty=(none) comm="dbus-daemon" exe="/usr/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1363066895.691:422): avc: denied { read } for pid=539 comm="dbus-daemon" name="run" dev="dm-1" ino=1177399 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=lnk_file ---- time->Tue Mar 12 06:42:40 2013 type=SYSCALL msg=audit(1363066960.635:429): arch=c000003e syscall=42 success=no exit=-2 a0=1f a1=7fff1c0ab340 a2=6e a3=20aa3a0 items=0 ppid=1 pid=539 auid=4294967295 uid=81 gid=81 euid=81 suid=81 fsuid=81 egid=81 sgid=81 fsgid=81 ses=4294967295 tty=(none) comm="dbus-daemon" exe="/usr/bin/dbus-daemon" subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1363066960.635:429): avc: denied { read } for pid=539 comm="dbus-daemon" name="run" dev="dm-1" ino=1177399 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_t:s0 tclass=lnk_file [root@Fedora-rawhide-20130303-x86_64-i ~]#
Created attachment 708772 [details] ausearch-m-avc-ts-today-output Output of ausearch -m avc -ts today
Could you try to execute # restorecon -R -v /var
[root@Fedora-rawhide-20130303-x86_64-i ~]# restorecon -R -v /var restorecon reset /var/log/anaconda context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/ks-script-SE7w_N.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.packaging.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.ifcfg.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.program.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.xlog context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/ks-script-xJgS9I.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/ks-script-JQhSL_.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/syslog context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/anaconda/anaconda.storage.log context system_u:object_r:initrc_var_log_t:s0->system_u:object_r:var_log_t:s0 restorecon reset /var/log/boot.log context system_u:object_r:var_log_t:s0->system_u:object_r:plymouthd_var_log_t:s0 restorecon reset /var/gdm context system_u:object_r:auth_cache_t:s0->system_u:object_r:xserver_log_t:s0 restorecon reset /var/run context system_u:object_r:var_t:s0->system_u:object_r:var_run_t:s0 restorecon: Warning no default label for /var/lib/nfs/rpc_pipefs restorecon: Warning no default label for /var/tmp/systemd-private-zJgaQR restorecon: Warning no default label for /var/tmp/systemd-private-ImJyAM restorecon reset /var/tmp/abrt context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1 context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/pkg_epoch context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/count context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/time context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/uuid context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/type context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/pkg_name context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/duphash context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/component context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/pkg_arch context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/reason context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/backtrace context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/package context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/core_backtrace context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/cmdline context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/pkg_version context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/analyzer context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/kernel context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/suspend_stats context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/dmesg context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/proc_modules context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/pkg_release context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/abrt_version context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/architecture context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/hostname context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-06:40:07-599-1/os_release context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1 context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/pkg_epoch context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/count context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/time context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/uuid context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/type context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/pkg_name context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/duphash context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/component context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/pkg_arch context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/reason context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/kernel_tainted_short context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/backtrace context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/package context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/core_backtrace context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/cmdline context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/pkg_version context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/analyzer context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/kernel context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/suspend_stats context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/dmesg context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/proc_modules context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/not-reportable context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/pkg_release context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/abrt_version context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/architecture context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/kernel_tainted_long context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/hostname context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon reset /var/tmp/abrt/oops-2013-03-12-12:26:09-643-1/os_release context system_u:object_r:initrc_tmp_t:s0->system_u:object_r:abrt_var_cache_t:s0 restorecon: Warning no default label for /var/tmp/systemd-private-3rNFQk [root@Fedora-rawhide-20130303-x86_64-i ~]#
How does it work now?
Created attachment 708922 [details] ausearch--m-avc-ts-today-after-fixfiles-restore-and-reboot After fixefiles restore and reboot without enforcing=0: [root@Fedora-rawhide-20130303-x86_64-i ~]# cat /proc/cmdline BOOT_IMAGE=/vmlinuz-3.9.0-0.rc0.git14.1.fc19.x86_64 root=/dev/mapper/fedora_fedora--rawhide--20130303--x86_64--i-root ro rd.md=0 rd.dm=0 rd.lvm.lv=fedora_fedora-rawhide-20130303-x86_64-i/root rd.luks=0 vconsole.keymap=us rd.lvm.lv=fedora_fedora-rawhide-20130303-x86_64-i/swap rhgb quiet [root@Fedora-rawhide-20130303-x86_64-i ~]# Then the output of ausearch -m avc -ts today was as attached here.
Hmm, so we see var_t also after relabeling. Could you try to execute # yum reinstall selinux-policy-targeted
This didn’t work for me: [root@Fedora-rawhide-20130303-x86_64-i ~]# LANG=en_GB.UTF-8 yum reinstall selinux-policy-targeted Loaded plugins: langpacks, refresh-packagekit Installed package selinux-policy-targeted-3.12.1-17.fc19.noarch (from anaconda) not available. Error: Nothing to do [root@Fedora-rawhide-20130303-x86_64-i ~]# rpm -q selinux-policy-targeted selinux-policy-targeted-3.12.1-17.fc19.noarch [root@Fedora-rawhide-20130303-x86_64-i ~]# I tried wether I could reinstall other packages like “less” and this worked: [root@Fedora-rawhide-20130303-x86_64-i ~]# LANG=en_GB.UTF-8 yum reinstall less Loaded plugins: langpacks, refresh-packagekit Resolving Dependencies --> Running transaction check ---> Package less.x86_64 0:451-3.fc19 will be reinstalled --> Finished Dependency Resolution Dependencies Resolved ===================================================================================== Package Arch Version Repository Size ===================================================================================== Reinstalling: less x86_64 451-3.fc19 rawhide 116 k Transaction Summary ===================================================================================== Reinstall 1 Package Total download size: 116 k Installed size: 210 k Is this ok [y/N]: y Downloading packages: less-451-3.fc19.x86_64.rpm | 116 kB 00:00:00 Running transaction check Running transaction test Transaction test succeeded Running transaction Installing : less-451-3.fc19.x86_64 1/1 Verifying : less-451-3.fc19.x86_64 1/1 Installed: less.x86_64 0:451-3.fc19 Complete! [root@Fedora-rawhide-20130303-x86_64-i ~]# yum seems to know “selinux-policy-targeted”: [root@Fedora-rawhide-20130303-x86_64-i ~]# yum search selinux-policy 読み込んだプラグイン:langpacks, refresh-packagekit ============================ N/S matched: selinux-policy ============================ selinux-policy.noarch : SELinux policy configuration selinux-policy-devel.noarch : SELinux policy devel selinux-policy-doc.noarch : SELinux policy documentation selinux-policy-minimum.noarch : SELinux minimum base policy selinux-policy-mls.noarch : SELinux mls base policy selinux-policy-targeted.noarch : SELinux targeted base policy Name and summary matches only, use "search all" for everything. [root@Fedora-rawhide-20130303-x86_64-i ~]# So I have no idea why it doesn’t want to reinstall that one.
Did you try "yum update selinux-policy-targeted"?
(In reply to comment #15) > Did you try "yum update selinux-policy-targeted"? That didn’t work either, maybe because of the f19 branch from rawhide, but not "yum update selinux-policy-targeted" works again, just waiting made this "yum update selinux-policy-targeted" work.
So "yum update selinux-policy-targeted" now gives me: selinux-policy-targeted-3.12.1-20.fc19.noarch selinux-policy-3.12.1-20.fc19.noarch [root@Fedora-rawhide-20130303-x86_64-i ~]# fixfiles restore Relabeling / /boot /dev /dev/hugepages /dev/mqueue /dev/pts /dev/shm /run /sys /sys/fs/cgroup /tmp 100.0% [root@Fedora-rawhide-20130303-x86_64-i ~]# then reboot without adding "enforcing=0" to the command line: [root@Fedora-rawhide-20130303-x86_64-i ~]# cat /proc/cmdline BOOT_IMAGE=/vmlinuz-3.9.0-0.rc0.git14.1.fc19.x86_64 root=/dev/mapper/fedora_fedora--rawhide--20130303--x86_64--i-root ro rd.md=0 rd.dm=0 rd.lvm.lv=fedora_fedora-rawhide-20130303-x86_64-i/root rd.luks=0 vconsole.keymap=us rd.lvm.lv=fedora_fedora-rawhide-20130303-x86_64-i/swap rhgb quiet [root@Fedora-rawhide-20130303-x86_64-i ~]# Then the output of ausearch -m avc -ts today is not empty but much shorter. (run when the “Oh no! Something has gone wrong.” screen was reached)
Created attachment 710615 [details] ausearch--m-avc-ts-today-after-fixfiles-restore-and-reboot-20130315
I think this now fixed, right?
It doesn’t happen anymore with Fedora-19-Alpha-TC3-x86_64-DVD.iso.