| View previous topic :: View next topic |
| Author |
Message |
vyedmic
n00b
Joined: 02 Dec 2010
Posts: 45
|
 Posted: Mon Dec 16, 2024 1:50 pm Post subject: SELinux: Unable to switch to permissive mode |
 |
|
Hello,
I have followed the SELinux installation guide and have now multiple times selected SELinux profile and then de-selected it, rebuilt world and depcleaned all selinux remnants but I always hit this same problem. It does not matter whether SELINUX=permissive is set or whether enforcing=0 is passed to kernel. This error always stops init from running.
| Code: | | SELinux: Unable to switch to permissive mode: Invalid argument |
https://paste.pics/SIYEG |
|
| Back to top |
|
 |
sMueggli
Guru
Joined: 03 Sep 2022
Posts: 511
|
| Posted: Mon Dec 16, 2024 3:26 pm Post subject: |
|
|
How or where did you set it?
Does the kernel boot if you pass (ad-hoc) "selinux=0" to the kernel parameters? |
|
| Back to top |
|
|
vyedmic
n00b
Joined: 02 Dec 2010
Posts: 45
|
| Posted: Mon Dec 16, 2024 3:27 pm Post subject: |
|
|
Yes, kernel boots without lsm=selinux
I set it in /etc/selinux/config and I also tried passing enforcing=0 to kernel |
|
| Back to top |
|
|
sMueggli
Guru
Joined: 03 Sep 2022
Posts: 511
|
| Posted: Mon Dec 16, 2024 3:45 pm Post subject: |
|
|
Can you please share your complete /etc/selinux/config?
And also the kernel parameters, that you pass to the kernel? |
|
| Back to top |
|
|
vyedmic
n00b
Joined: 02 Dec 2010
Posts: 45
|
| Posted: Mon Dec 16, 2024 3:59 pm Post subject: |
|
|
Kernel parameters
| Code: | | root=PARTUUID=my-root-part-uuid ro lsm=selinux |
/etc/selinux/config is standard, unchanged from the install.
| Code: | # This file controls the state of SELinux on the system on boot.
# SELINUX can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=permissive
# SELINUXTYPE can take one of these four values:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
# mls - Full SELinux protection with Multi-Level Security
# mcs - Full SELinux protection with Multi-Category Security
# (mls, but only one sensitivity level)
SELINUXTYPE=strict
|
I am at the point of SELinux installation guide where I am supposed to reboot to label my system. |
|
| Back to top |
|
|
|
Networking & Security
