BLAG

BLAG Forums
It is currently Sun Dec 21, 2014 10:04 am

All times are UTC




Post new topic Reply to topic  [ 10 posts ] 
Author Message
PostPosted: Mon Jun 27, 2005 5:19 pm 
Offline
Site Admin

Joined: Wed Mar 17, 2004 6:17 pm
Posts: 1340
Location: London, UK
Dear Chaps,

Code:
apt-get update && apt-get dist-upgrade


I noticed that selinux was being updated and I carried on working as usual. Things started behaving strangely soon after that. My fluxbox menu and key bindings stoped working. I rebooted to find this error

Quote:
Red hat nash version 4.1.18 starting
reading all physical volumes. This may take a while
found 2 volume "volgroup00" using metatype lvm2
2 logical volume(s) oon volume group "volgroup00" now active
audit (1119894203.980:0) avl: denied
{execmod} for ppid=1 comm= init
path=/lib/tls/libc-2.3.5.so dev=dm0 in0=5111923 scontext=user_u: o:system_r:unconfined_t tconext= system=system_u:object_r:shlib_t tclass=file
/sbin/init:error while loading shared librares: /lib/tls/libc.so.6: cannot apply additional memory protection after allocation
permission denied
kernel panic attempt to kill init


The box hasn't booted since. tried three times. Now using a live cd. Any suggestions?
- run bad blocks?
-

----
please let me know of any additional info that may help to solve this. I can provide box spcs and blag version. Thinkpad t20, 750mhz on PIII, 80bg hdd, blag 30k

_________________
BLAG 'em up!


Top
 Profile  
 
 Post subject:
PostPosted: Mon Jun 27, 2005 10:55 pm 
Offline
Site Admin

Joined: Wed Mar 17, 2004 6:17 pm
Posts: 1340
Location: London, UK
apparently it seems that i need to dig into /dev/hda2 (where the data is) and change /etc/selinux. Only trouble is that it's a logical vomume and I have no idea how to mount it. All help greatly appreciated.

_________________
BLAG 'em up!


Top
 Profile  
 
 Post subject:
PostPosted: Mon Jun 27, 2005 11:44 pm 
:lol: :lol: :lol: Hurrah! Problem sorted! The solution is here...
https://www.redhat.com/archives/fedora-selinux-list/2005-June/msg00085.html
Sorry for the flase alarm but it was quite worrying being unable to mount lvm filesystem with a live cd distro :oops: [/u]


Top
  
 
 Post subject:
PostPosted: Tue Jun 28, 2005 12:31 am 
Offline
Site Admin

Joined: Sun Mar 14, 2004 3:17 pm
Posts: 4492
Location: Loveland, Colorado, USA
I know you have it solved, but for future reference, you can disable selinux by adding "selinux=0" to the boot prompt (like hit "a" (?)in grub and then add that to the end)

-Jeff


Top
 Profile  
 
 Post subject:
PostPosted: Thu Jun 30, 2005 6:39 pm 
Offline

Joined: Fri Apr 02, 2004 2:42 am
Posts: 223
Location: Charleston, SC USA
After reading this it made me a little on edge to upgrade but took the plunge and it wacked my machine... So I took your advice and hit 'a' at grub typed selinux=0 and booted again whoopee! My machine is back again. BLAG runs sweet. Thanks for the input Jeff! :D


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 01, 2005 1:12 am 
Offline

Joined: Fri Apr 02, 2004 2:42 am
Posts: 223
Location: Charleston, SC USA
I had to edit /etc/selinux/config and disable it to get it to boot proper again, is it ok to just disable it?(cause don't really know that much about it.) Is selinux friend or foe? :shock:


Top
 Profile  
 
 Post subject:
PostPosted: Fri Jul 01, 2005 1:42 am 
Offline
Site Admin

Joined: Sun Mar 14, 2004 3:17 pm
Posts: 4492
Location: Loveland, Colorado, USA
You can disable it ok. I often disable it on my systems...


Top
 Profile  
 
 Post subject:
PostPosted: Sat Jul 02, 2005 2:49 am 
Offline
Site Admin

Joined: Sun Mar 14, 2004 6:08 pm
Posts: 973
Location: Canada
Unless you're in a server environment, I'd actually recommend you disable SELinux to prevent incidents like this one from occuring.

_________________
E-mail me at s.clement@localhost (replace localhost with sympatico.ca) or stevo32@localhost (replace localhost with blagblagblag.org).


Top
 Profile  
 
 Post subject:
PostPosted: Sun Jul 03, 2005 10:04 am 
Offline

Joined: Mon May 16, 2005 11:02 am
Posts: 277
Location: Basque Country/Euskal Herria
had to disable SElinux too, after kernel panic. it was also, somehow, preventing the installation of the NVidia driver.


Top
 Profile  
 
 Post subject:
PostPosted: Sun Nov 20, 2005 10:13 pm 
Offline

Joined: Sun Nov 20, 2005 9:56 pm
Posts: 3
OK, I come from the Windows world, so the language I use might be a bit different.

I view SELinux as a Service would be viewed under Windows. The Services are sometimes dependent upon other services to be running in order for them to function correctly.

So, in that light, what 'Services' are necessary to make SELinux complete the file system relabeling when set to 'Strict, Enforced' mode?

I tried setting it to that, and my boot halted right after if found the two Linux drives.

However, when I set it to 'Targeted, Enforced', the file system relabeling went through without a hitch, and the machine appears to run correctly.

I'd like, however, to crank the security down as tight as possible, since I'll be using the machine to track and fight spammers.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 10 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users and 0 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group