You are not logged in.

#1 2010-01-18 09:15:24

AlannY
Member
Registered: 2010-01-18
Posts: 3

[SOLVED] SELinux is not managed

Hi there. Recently I've installed Archlinux in my KVM. And now I want to turn on SELinux feature.

I found good article: http://wiki.archlinux.org/index.php/SELinux and do everything as it told me. Everything *everything* was successful. I've downloaded PKGBUILDs from AUR, build them and install. No problem. I can login with kernel26-selinux in permissive mode. No audit warnings.

But when, I want to execute:

%# semanage login -l
/usr/sbin/semanage: SELinux policy is not managed or store cannot be accessed.

I don't know want I'm doing wrong. ;-(

%# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   permissive
Mode from config file:          permissive
Policy version:                 24
Policy from config file:        refpolicy
%# zgrep SELINUX /proc/config.gz
CONFIG_SECURITY_SELINUX=y
CONFIG_SECURITY_SELINUX_BOOTPARAM=y
CONFIG_SECURITY_SELINUX_BOOTPARAM_VALUE=1
CONFIG_SECURITY_SELINUX_DISABLE=y
CONFIG_SECURITY_SELINUX_DEVELOP=y
CONFIG_SECURITY_SELINUX_AVC_STATS=y
CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1
# CONFIG_SECURITY_SELINUX_POLICYDB_VERSION_MAX is not set

When I'm trying to go to enforcing mode, the shell exits and when I'm trying to relogin, I'm getting message

Cannot execute /bin/bash: Permission denied

What to do? I want to use Archlinux on my server, but I need SELinux support. Is there a man successfully installed SELinux? I want to talk with him...

Thanks for patience.

Last edited by AlannY (2010-01-21 12:39:13)

Offline

#2 2010-01-21 12:38:47

AlannY
Member
Registered: 2010-01-18
Posts: 3

Re: [SOLVED] SELinux is not managed

I forgot to build modular policy and built monolith. It was a problem. So, solved.

Offline

Board footer

Powered by FluxBB