Test3 and SELinux

Wayne Steenburg w.steenburg at myactv.net
Thu Apr 29 11:26:22 UTC 2004


On Thu, 2004-04-29 at 00:59, Hannes Mayer wrote:
> Wayne Steenburg wrote:
> 
> > I probably just don't understand something properly, but I thought
> > SELinux was off by default for test3. Here's what I get:
> > 
> > wayne at FC2-WORKSTATION wayne]$ dmesg | grep SELinux
> > SELinux:  Initializing.
> > SELinux:  Starting in permissive mode
> > SELinux:  Registering netfilter hooks
> > 
> > This is on a fresh install (not upgrade).  Does anyone know why I'm
> > getting these messages?
> 
> It is disabled in /etc/security/selinux. If you want to disable it in
> the kernel aswell, just pass selinux=0 to the kernel in GRUB.
> 
> Cheers,
> Hannes.
> 
Should this be the default for the final Core 2 (selinux=0)? After
running yum, I received a whole bunch of warnings on the console. I
didn't think to copy them, but here's a snip from /var/log/messages:

Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postfix_spool_flush_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context system_u:object_r:etc_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context system_u:object_r:lib_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context system_u:object_r:lib_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context system_u:object_r:ld_so_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context system_u:object_r:shlib_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_exec_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_db_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_var_run_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_etc_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_log_t
Apr 28 22:36:56 FC2-WORKSTATION kernel: security_context_to_sid: called
before initial load_policy on unknown context
system_u:object_r:postgresql_log_t


I don't mind adding the boot parameter, but for people new to Core 2 all
those errors might be confusing/intimidating.

Wayne Steenburg





More information about the fedora-test-list mailing list