Skip top menus
National Security Agency and Central Security Service with agency logos.NSA/CSS Memorial Wall
Home    About NSA    Research    Business    Careers    Public Info    History
Introduction to Research    Security-Enhanced Linux    Information Assurance Research    Technology Transfer    Publications    Related Links

>>SELinux Mailing List: by thread

Search
What's new?
Contents
Overview
What's New
Frequently Asked Questions
Background
Documentation
License
Download
Participating
Mail List
Archive Summary
Archive by Thread
Archive by Author
Archive by Date
Archive by Subject
Remaining Work
Contributors
Related Work
Press Releases
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]
From: Rajan Ravindran <rajancr_at_us.ibm.com>
subject: Re: policy
Date: Fri, 1 Jun 2001 10:22:30 -0400
  • This message: [ Message body ]
  • Next message: C. Slater: "SeLinux and Loopback Encryption?"
  • Previous message: Westerman, Mark: "RE: SELinux on a Workstation Reprise"
  • Maybe in reply to: Russell Coker: "policy"
  • Next in thread: Stephen Smalley: "Re: policy"
  • Reply: Stephen Smalley: "Re: policy"

Hi,
While I do relabel my file system, I'm getting some errors as

invalid context system_u:object_r:sysadm_netscape_rw_ti on line number 65

similar errors (by appending 'i' at the end of type field in the context) at different line numbers.

some days before Hugo F.Martinez claimed the same kind of error, for that Jon
Crowley replied as it could be a simple typo error. I verified with the file_contexts in the specified line numbers, I don't see any 'i' at the end.

Any idea what could be the problem.

Thanks,
Rajan.

Did you modify file_contexts? It appears that is simply a typo... try changing that line in file_contexts to the following, note the lack of "i" on the end:

system_u:object_r:cron_log_t

Jon Crowley

"Hugo F. Martinez" wrote:
>
> Hi:
> Im trying to relabel my file system but im getting this kind of errors
>
> ....
> ./set files: invalid context system_u:object_r:cron_log_ti on line
> number 368
> make: *** [relabel] Error 1
>
> I check the file_contexts but i cant see any clue of where the problem
>
> Thanks in advance.
>
> --
> You have received this message because you are subscribed to the selinux
list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
> the words "unsubscribe selinux" without quotes as the message.

--
You have received this message because you are subscribed to the selinux
list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov
with
the words "unsubscribe selinux" without quotes as the message.





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
From: Stephen Smalley <sds_at_tislabs.com>
subject: Re: policy
Date: Wed, 6 Jun 2001 13:47:18 -0400 (EDT)
  • This message: [ Message body ]
  • Next message: Stephen Smalley: "Re: SeLinux and Loopback Encryption?"
  • Previous message: Hugo F. Martinez: "Configuring users"
  • In reply to: Rajan Ravindran: "Re: policy"
  • Next in thread: Stephen D. Smalley: "Re: policy"

On Fri, 1 Jun 2001, Rajan Ravindran wrote:

> While I do relabel my file system, I'm getting some errors as
>
> invalid context system_u:object_r:sysadm_netscape_rw_ti on line number 65
>
> similar errors (by appending 'i' at the end of type field in the context)
> at different line numbers.

I haven't seen this error, and nothing springs to mind as a possible cause. Try using gdb on the setfiles program, setting a breakpoint immediately after the sscanf call (line 458), and a breakpoint before the security_context_to_sid call (line 553). Examine context at each breakpoint.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com






--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:53 EDT

Information Assurance | Signals & Intelligence        Links | Accessibility | Privacy & Security