Re: Error loading libsepol on during system boot

[Stephen Smalley]

On Wed, 2005-04-06 at 13:01 -0500, W. Michael Petullo wrote:
>  I have been sitting on a problem for a few weeks, waiting to see if
> a
>  forthcoming policy package would fix it.  I wanted to mention it on this
>  mailing list before entering it into Bugzilla because I am not convinced
>  it is not my fault.
>  
>  When I try to boot my system with Fedora's strict policy, the process
>  stops with the following message:
>  
>  ... denied { execmem } for pid=1 comm=init scontext=system_u:system_r:init_t
> tcontext=system_u:system_r:init_t tclass=process
>  /sbin/init: error while loading shared libraries: libsepol.so.1: failed to map segment
> from shared object: Permission denied
>  kernel panic - not syncing: Attempted to kill init!
>  
>  I am using:
>  
>  SysVinit-2.85-37
>  selinux-policy-strict-1.23.6-3
>  libsepol-1.5.3-1
>  
>  Has anyone else experienced this? 
If your architecture is ppc32, then you are likely encountering the
issue described in bugzilla 149819.  A patch was created and upstreamed,
and included in the rawhide kernel, so you shouldn't still see it if you
have updated your kernel.

-- 
Stephen Smalley <sds(a)tycho.nsa.gov&gt;
National Security Agency