problems switching from targeted to strict policy...

[Tim Kossack]

hi,

i just installed fc3 (with selinux=permissive and configuration=minimal)
in order to get familiar with selinux. 
after updating the system and installing the strict-policy as well as
the strict and targeted sources via yum, i edited /etc/selinux/config to
"strict" and rebooted.
since then, during boot, i'm getting flodded with "avc denied" for
nearly every service (didn't happen while i had "targeted" enabled),
even when i login.
i tried to fix it with executing "make load/reload/relabel" in the
strict-src-directory, but that doesn't work.
after second glance at the selinux-faq i discovered that i forgot to do
"touch/.autorelabel" before first reboot.
did this cause my problems, or is it a problem with the strict policy
itself?
how do i fix it (if still possible)?

thx!

[Tim Kossack]

On Sun, 2005-07-10 at 21:22 -0700, tim kossack wrote:
[snip]
>  i tried to fix it with executing "make load/reload/relabel"
> in the
>  strict-src-directory, but that doesn't work. 
[/snip]

tried it in /etc/selinux/strict/src/policy/, of course.

[Daniel J Walsh]

tim kossack wrote:

> On Sun, 2005-07-10 at 21:22 -0700, tim kossack wrote:
> [snip]
>   
>
> >i tried to fix it with executing "make load/reload/relabel" in the
> >strict-src-directory, but that doesn't work.
> >    
> >
> [/snip]
>
> tried it in /etc/selinux/strict/src/policy/, of course.
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list(a)redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
>   
>  
Update to the latest strict policy from the devel branch. 

Dan

--