selinux out smarted itself. "Multiple different specifications" One FILE But two types labled ------------- (system_u:object_r:home_root_t:s0 and system_u:object_r:boot_t:s0).

[Roger Salisbury]

----------- a challenge for selinux------------

Hi fellow selinux uses ...

How can you fix labeling when the  selinux tools don't allow you to.

Selinux commands complain & refuse to work.

Tradition selinux commands don't work. IE chcon, restorecon , fixfiles,

setfiles  etc..I Need an *expert* here, ..........

PROBLEM is :

my /boot directory has :

:boot_t:

and

:home_root_t:

.......... together labled --- see below.

and I can't fix it.  do we have to edit the "inode" directly??

Having two types on one file I believe should *never* happen but -- it has.

Should be one  ":boot_t:"  or the other ":home_root_t:"  but never
*both*!

I think I know how it happened -- but that's not the issue right now -- 
how do you fix it??
The security of selinux normaly is designed to prevent adhoc changes --- so 
this is why it is difficult... but with root password their would be a 
solution somehow.

Thx
Roger Salisbury


Below is the setfiles display:


/etc/selinux/targeted/contexts/files/file_contexts: Multiple same

specifications for /boot/lost\+found/.*.

/etc/selinux/targeted/contexts/files/file_contexts: Multiple different

specifications for /boot  (system_u:object_r:home_root_t:s0 and

system_u:object_r:boot_t:s0).

/etc/selinux/targeted/contexts/files/file_contexts: Multiple same

specifications for /boot/\.journal.

/etc/selinux/targeted/contexts/files/file_contexts: Multiple same

specifications for /boot/lost\+found.

setfiles: labeling files under /boot

setfiles:  labeling files under /boot

matchpathcon_filespec_eval:  hash table stats: 28 elements, 28/65536 buckets

used, longest chain length 1

setfiles:  Done.