secure_mode_policyload troubles

[Simon Sekidde]

----- Original Message -----
> From: "George Karakougioumtzis" <mad-proffessor at hotmail.com>
> To: "Simon Sekidde" <ssekidde at redhat.com>
> Cc: selinux at lists.fedoraproject.org
> Sent: Monday, June 8, 2015 11:48:46 AM
> Subject: Re: secure_mode_policyload troubles
> 
> Everything works fine in permissive mode, i get these in enforcing only.
> 

Please run 

 semodule -DB #to disable dontaudit rules
 ausearch -i -m avc -ts today #to grab avc messages

> On 06/08/2015 05:55 PM, Simon Sekidde wrote:
> >
> > ----- Original Message -----
> >> From: "George Karakougioumtzis" <mad-proffessor at hotmail.com>
> >> To: selinux at lists.fedoraproject.org
> >> Sent: Monday, June 8, 2015 9:36:54 AM
> >> Subject: secure_mode_policyload troubles
> >>
> >> After an upgrade to fedora 22 i was able to solve all the problems i had
> >> with systemd-logind not being able to register  user sessions and
> >> everything except polkit was working flawlessly in enforcing mode(well
> >> since polkit is responsible for shutting down the system from the
> >> gnome-shell and i cant do that you cant say its a flawless desktop
> >> experience but ok it solved many other problems). Now after i turned on
> >> secure-mode_policyload boolean i am at the same state. Pulseaudio is not
> >> working, loginctl shows no user sessions with a message of start user
> >> slice failed and polkit  doesn't work for any of my users.
> >> Audit subsystem doesn't reveal anything useful. Even if i turn of the
> >> boolean i stiil have these problems. Where to go from here?
> > Is this not working in both permissive and enforcing mode or just enforcing
> > mode?
> >
> >> --
> >> selinux mailing list
> >> selinux at lists.fedoraproject.org
> >> https://admin.fedoraproject.org/mailman/listinfo/selinux
> 
> 

-- 
Simon Sekidde * Red Hat, Inc. * Westford, MA
gpg: 5848 958E 73BA 04D3 7C06 F096 1BA1 2DBF 94BC 377E