All of lore.kernel.org
 help / color / mirror / Atom feed
From: JanuGerman <doublemalam@yahoo.co.uk>
To: Stephen Smalley <sds@tycho.nsa.gov>
Cc: SELinux List <selinux@tycho.nsa.gov>
Subject: Re: SELinux cache.
Date: Thu, 29 Mar 2007 14:33:45 +0100 (BST)	[thread overview]
Message-ID: <25193.15470.qm@web86909.mail.ukl.yahoo.com> (raw)
In-Reply-To: <1174999097.3864.271.camel@moss-spartans.epoch.ncsc.mil>

Hi Stephen,


> $ cat test.te
> policy_module(test, 1.0)
> 
> require {
>         attribute domain;
>         attribute file_type;
> }
> 
> auditallow domain file_type:dir_file_class_set *;
> $ make -f /usr/share/selinux/devel/Makefile
> $ su -
> # semodule -i test.pp
> # tail -f /var/log/audit/audit.log
> 
> But be warned that this will generate a lot of
> audit.
> To remove, use:
> # semodule -r test
> 

I am having some problems now with this module. I
added this module, after restart, there were alot of
messages, saying "audit ... maximum size=256 size
exceeded". The messages were not stopping so, I
rebooted the system with selinux disabled and tried to
remove this module.

But now, when i reboot, the system hangs at starting
"udev" service MAKEDEV: mkdir: FILE exists ...saying
an error occured during file system check, dropping
you to shell, ... give root password for maintaine....

My system have e compiled kernels, but non of them is
rebooting with SElinux.

Can i recover the SELinux again while rebooted without
SElinux? or this means, the system is not usable any
more.

Thanks,
JG


		
___________________________________________________________ 
The all-new Yahoo! Mail goes wherever you go - free your email address from your Internet provider. http://uk.docs.yahoo.com/nowyoucan.html

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

  reply	other threads:[~2007-03-29 13:33 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2007-03-27  9:31 SELinux cache JanuGerman
2007-03-27 12:38 ` Stephen Smalley
2007-03-29 13:33   ` JanuGerman [this message]
2007-03-29 13:38     ` Stephen Smalley

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=25193.15470.qm@web86909.mail.ukl.yahoo.com \
    --to=doublemalam@yahoo.co.uk \
    --cc=sds@tycho.nsa.gov \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.