Re: F11 Relabel problem

[Daniel J Walsh]

On 08/14/2009 10:49 AM, Arthur Dent wrote:
>  On Fri, 2009-08-14 at 10:37 -0400, Daniel J Walsh wrote:
> > On 08/14/2009 04:10 AM, Arthur Dent wrote:
>  
> > The problem is a lot of the scripts were renamed from
> >
> >
> > DAEMON_script_exec_t to DAEMON_initrc_exec_t
> >
> > So I think restore is complaining because the previous label has gone away.
> >
> > If you ls -lZ /etc/init.d/ 
> >
> > Look for unlabeled_t or script_exec_t, if you have those you might have a problem.
> >
> > If they all look like *initrc_exec_t or just initrc_exec_t then you are probably ok.
> >
>  
>  This could be my problem:
>  
>  ls -lZ /etc/init.d/ 
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid
>  -rwxr-xr-x. root root system_u:object_r:crond_initrc_exec_t:s0 atd
>  -rwxr-xr-x. root root system_u:object_r:auditd_initrc_exec_t:s0 auditd
>  -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0
>  avahi-daemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond
>  -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0
>  cups-config-daemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient
>  -rwxr-xr-x. root root system_u:object_r:dnsmasq_initrc_exec_t:s0 dnsmasq
>  -rwxr-xr-x. root root system_u:object_r:dovecot_initrc_exec_t:s0 dovecot
>  -rwxr-xr-x. root root system_u:object_r:fail2ban_initrc_exec_t:s0
>  fail2ban
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot
>  -rw-r--r--. root root system_u:object_r:bin_t:s0       functions
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt
>  -rwxr-xr-x. root root system_u:object_r:httpd_initrc_exec_t:s0 httpd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd
>  -rwxr-xr-x. root root system_u:object_r:mysqld_initrc_exec_t:s0 mysqld
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock
>  -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 nmb
>  -rwxr-xr-x. root root system_u:object_r:nscd_initrc_exec_t:s0 nscd
>  -rwxr-xr-x. root root system_u:object_r:ntpd_initrc_exec_t:s0 ntpd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate
>  -rwxr-xr-x. root root system_u:object_r:openvpn_initrc_exec_t:s0 openvpn
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 portreserve
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond
>  -rwxr-xr-x. root root system_u:object_r:rpcbind_initrc_exec_t:s0 rpcbind
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd
>  -rwxr-xr-x. root root system_u:object_r:syslogd_initrc_exec_t:s0 rsyslog
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail
>  -rwxr-xr-x. root root system_u:object_r:shorewall_initrc_exec_t:s0
>  shorewall
>  -rwxr-xr-x. root root system_u:object_r:fsdaemon_initrc_exec_t:s0 smartd
>  -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 smb
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt
>  -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmpd
>  -rwxr-xr-x. root root system_u:object_r:snmpd_initrc_exec_t:s0 snmptrapd
>  -rwxr-xr-x. root root system_u:object_r:spamd_initrc_exec_t:s0
>  spamassassin
>  -rwxr-xr-x. root root system_u:object_r:squid_initrc_exec_t:s0 squid
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0
>  transparent-proxying
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post
>  -rwxr-xr-x. root root system_u:object_r:samba_initrc_exec_t:s0 winbind
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant
>  -rwxr-xr-x. root root system_u:object_r:ypbind_initrc_exec_t:s0 ypbind
>  
>  
>  Looks OK ... But
>  
>  ls -lZ /mnt/F9/etc/init.d/ 
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 acpid
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 anacron
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 atd
>  -rwxr-xr-x. root root system_u:object_r:auditd_script_exec_t:s0 auditd
>  -rwxr-xr-x. root root system_u:object_r:avahi_initrc_exec_t:s0
>  avahi-daemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 backuppc
>  -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0
>  bluetooth
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 btseed
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 bttrack
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 clamd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 cpuspeed
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 crond
>  -rwxr-xr-x. root root system_u:object_r:cupsd_initrc_exec_t:s0 cups
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0
>  cups-config-daemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_client
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 dc_server
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ddclient
>  -rwxr-xr-x. root root system_u:object_r:dnsmasq_script_exec_t:s0 dnsmasq
>  -rwxr-xr-x. root root system_u:object_r:dovecot_script_exec_t:s0 dovecot
>  -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 dund
>  -rwxr-xr-x. root root system_u:object_r:fail2ban_script_exec_t:s0
>  fail2ban
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firestarter
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 firstboot
>  -rwxr-xr-x. root root system_u:object_r:bin_t:s0       functions
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 gpm
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 haldaemon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 halt
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 hsqldb
>  -rwxr-xr-x. root root system_u:object_r:httpd_script_exec_t:s0 httpd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ip6tables
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 iptables
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irda
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 irqbalance
>  -rwxr-xr-x. root root system_u:object_r:kerneloops_script_exec_t:s0
>  kerneloops
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 killall
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 lm_sensors
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 mdmonitor
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 messagebus
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 microcode_ctl
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 multipathd
>  -rwxr-xr-x. root root system_u:object_r:mysqld_script_exec_t:s0 mysqld
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netconsole
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netfs
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 netplugd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 network
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 NetworkManager
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfs
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 nfslock
>  -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 nmb
>  -rwxr-xr-x. root root system_u:object_r:nscd_script_exec_t:s0 nscd
>  -rwxr-xr-x. root root system_u:object_r:ntpd_script_exec_t:s0 ntpd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ntpdate
>  -rwxr-xr-x. root root system_u:object_r:openvpn_script_exec_t:s0 openvpn
>  -rwxr-xr-x. root root system_u:object_r:bluetooth_script_exec_t:s0 pand
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 pcscd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 psacct
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 racoon
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rdisc
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 restorecond
>  -rwxr-xr-x. root root system_u:object_r:rpcbind_script_exec_t:s0 rpcbind
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcgssd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcidmapd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 rpcsvcgssd
>  -rwxr-xr-x. root root system_u:object_r:syslogd_script_exec_t:s0 rsyslog
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 saslauthd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sendmail
>  -rwxr-xr-x. root root system_u:object_r:setroubleshoot_script_exec_t:s0
>  setroubleshoot
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 shorewall
>  -rwxr-xr-x. root root system_u:object_r:fsdaemon_script_exec_t:s0 smartd
>  -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 smb
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 smolt
>  -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmpd
>  -rwxr-xr-x. root root system_u:object_r:snmp_script_exec_t:s0 snmptrapd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 spamassassin
>  -rwxr-xr-x. root root system_u:object_r:squid_script_exec_t:s0 squid
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 squidGuard
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 sshd
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0
>  transparent-proxying
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 udev-post
>  -rwxr-xr-x. root root system_u:object_r:samba_script_exec_t:s0 winbind
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 wpa_supplicant
>  -rwxr-xr-x. root root system_u:object_r:initrc_exec_t:s0 ypbind
>  
>  
>  This is the old F9 partition. Should I try to fix them somehow or just
>  umount the F9 partition and only mount it when I need to peek inside?
>   
Well it is up to you.  One option would be to use a mount context when you mount
the partion, which would override and ignore the F9 labels.  Either way I don't think
it will cause you much problems.
>  Thanks!
>  
>  Mark
>  
>  
>  
>  ------------------------------------------------------------------------
>  
>  --
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list