{"id":1436,"date":"2015-05-06T21:47:22","date_gmt":"2015-05-06T20:47:22","guid":{"rendered":"http:\/\/rglinuxtech.com\/?p=1436"},"modified":"2015-05-06T21:47:22","modified_gmt":"2015-05-06T20:47:22","slug":"arm-more-selinux-problems","status":"publish","type":"post","link":"https:\/\/rglinuxtech.com\/?p=1436","title":{"rendered":"ARM &#8211; More SELinux Problems.."},"content":{"rendered":"<p>After updating the Odroid U3 to kernel 4.1-rc2 (see separate post) I encountered more SELinux \/ Fedora 22 issues..<\/p>\n<p>This time, SELinux tried to enable itself in &#8216;targeted&#8217; mode on reboot, despite being &#8216;disabled&#8217; in the config file..<\/p>\n<pre><strong>....<\/strong>\r\n<strong>[ OK ] Started Tell Plymouth To Write Out Runtime Data.<\/strong>\r\n<strong>[ OK ] Started Preprocess NFS configuration.\r\n*** Warning -- SELinux targeted policy relabel is required.<\/strong>\r\n<strong>*** Relabeling could take a very long time, depending on file<\/strong>\r\n<strong>*** system size and speed of hard drives.<\/strong>\r\n<strong>[ OK ] Started Restore \/run\/initramfs on shutdown.<\/strong>\r\n<strong>[ OK ] Started Rebuild Journal Catalog.<\/strong>\r\n<strong>......<\/strong><\/pre>\n<p>SELinux on the CuBox had forced a default to &#8216;permissive&#8217;, but the Odroid defaulted to &#8216;targeted&#8217;, which would force a relabel of all files on the system! As I didn&#8217;t want this, I aborted the boot process (pulled the power!)<\/p>\n<p>This would appear to be a possible bug in Fedora 22 &#8211; but only on <span style=\"text-decoration: underline;\">certain<\/span> armv7 systems.. I have updated one of the x86_64 systems to Fedora 22 and rebooted, and SELinux is staying &#8216;disabled&#8217;.. The Raspberry Pi 2 (armv7) has SELinux configured in the kernel, and has been updated to Fedora 22 &#8211; and rebooted &#8211; but SELinux stays &#8216;disabled&#8217;..<\/p>\n<pre><strong>[root@rgpi2 ~]# <\/strong>sestatus\r\n<strong>SELinux status: disabled<\/strong><\/pre>\n<p>Tried setting the kernel boot commands on the Odroid U3 to disable SELinux by adding &#8216;<strong><em>selinux=0<\/em><\/strong>&#8216; but this had no effect..<\/p>\n<p>I aborted the boot process again, and (cross-)re-compiled the kernel &#8211; on another system &#8211; to take out SELinux completely..<\/p>\n<p>With that, the Odroid booted without problems..<\/p>\n<p><em>Robert Gadsdon.\u00a0 May 6, 2015.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"<p>After updating the Odroid U3 to kernel 4.1-rc2 (see separate post) I encountered more SELinux \/ Fedora 22 issues.. This time, SELinux tried to enable itself in &#8216;targeted&#8217; mode on reboot, despite being &#8216;disabled&#8217; in the config file.. &#8230;. [ OK ] Started Tell Plymouth To Write Out Runtime Data. [ OK ] Started Preprocess NFS configuration. <span class=\"excerpt-dots\">&hellip;<\/span> <a class=\"more-link\" href=\"https:\/\/rglinuxtech.com\/?p=1436\"><span class=\"more-msg\">Continue reading &rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[5,6,10,11,14,16,794,19,20],"tags":[1100,1097,1101,795,1102,1098,1099,418],"class_list":["post-1436","post","type-post","status-publish","format-standard","hentry","category-compilation","category-crash-and-burn","category-fedora","category-hacks","category-kernel","category-linux-arm","category-odroid","category-opinion","category-performance-2","tag-config-ignored","tag-fedora-22","tag-kernel-boot-parameter-ignored","tag-odroid-u3","tag-recompile-kernel-deselect-selinux","tag-selinux-enabled-automatically","tag-targeted","tag-workaround"],"_links":{"self":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/1436","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1436"}],"version-history":[{"count":2,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/1436\/revisions"}],"predecessor-version":[{"id":1438,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=\/wp\/v2\/posts\/1436\/revisions\/1438"}],"wp:attachment":[{"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1436"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1436"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rglinuxtech.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1436"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}