Summary: | >=sys-apps/openrc-0.9.8.1 has a faulty selinux policy (cgroup support in the policy) | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Matthew Thode ( prometheanfire ) <prometheanfire> |
Component: | Hardened | Assignee: | SE Linux Bugs <selinux> |
Status: | RESOLVED DUPLICATE | ||
Severity: | normal | CC: | swift |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
*** This bug has been marked as a duplicate of bug 398839 *** |
>=sys-apps/openrc-0.9.8.1 was installed and system rebooted, fails to start /etc/init.d/sysfs because selinux denies it. I suspect that this is in basepol :D All you need to do is try and start that service while in enforcing mode. Tries to create /sys/fs/cgroup/cpuset and /sys/fs/cgroup/cpuacct at the least.