Re: Error loading libsepol on during system boot

[Stephen Smalley <sds tycho nsa gov>]

On Wed, 2005-04-06 at 13:01 -0500, W. Michael Petullo wrote:
> I have been sitting on a problem for a few weeks, waiting to see if a
> forthcoming policy package would fix it.  I wanted to mention it on this
> mailing list before entering it into Bugzilla because I am not convinced
> it is not my fault.
> 
> When I try to boot my system with Fedora's strict policy, the process
> stops with the following message:
> 
> ... denied { execmem } for pid=1 comm=init scontext=system_u:system_r:init_t tcontext=system_u:system_r:init_t tclass=process
> /sbin/init: error while loading shared libraries: libsepol.so.1: failed to map segment from shared object: Permission denied
> kernel panic - not syncing: Attempted to kill init!
> 
> I am using:
> 
> SysVinit-2.85-37
> selinux-policy-strict-1.23.6-3
> libsepol-1.5.3-1
> 
> Has anyone else experienced this?

If your architecture is ppc32, then you are likely encountering the
issue described in bugzilla 149819.  A patch was created and upstreamed,
and included in the rawhide kernel, so you shouldn't still see it if you
have updated your kernel.

-- 
Stephen Smalley <sds tycho nsa gov>
National Security Agency