Installing MLS policy on Fedora 9

[Elihu Smails]

I have installed Fedora 9 and wanted to install the MLS Policy.  I
performed the following steps:

1. Install Fedora 9
2. Install Patches
3. Reboot
4. yum install -y selinux-policy-mls
5. Open /etc/selinux/config and change the following:
SELINUX=enforcing
SELINUXTYPE=targeted

to

SELINUX=permissive
SELINUXTYPE=mls

6. touch /.autorelabel
7. Reboot.  The relabelling works fine
8. Set SELINUX to enforcing in /etc/selinux/config
9. Reboot.  I get many error messages about the file system and it
drops me into a single user shell.

Can someone please tell me what the proper steps are.

Thank you.

[Stephen Smalley]

On Fri, 2008-11-21 at 12:08 -0500, Elihu Smails wrote:
> I have installed Fedora 9 and wanted to install the MLS Policy.  I
> performed the following steps:
> Install Fedora 9
> Install Patches
> Reboot
> yum install -y selinux-policy-mls
> Open /etc/selinux/config and change the following:
>
> SELINUX=enforcing
> SELINUXTYPE=targeted
>
> to
>
> SELINUX=permissive
> SELINUXTYPE=mls
> touch /.autorelabel
> Reboot.  The relabelling works fine
> Set SELINUX to enforcing in /etc/selinux/config
> Reboot.  I get many error messages about the file system and it
>
> drops me into a single user shell.
>
> Can someone please tell me what the proper steps are.

I think we'd have to see the details of the errors, but the LSPP
configuration only covers a subset of the system and of course was for a
specific set of RHEL5 packages.

If you boot permissive instead, what avc messages do you get?