Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 400987

Summary: >=sys-apps/openrc-0.9.8.1 has a faulty selinux policy (cgroup support in the policy)
Product: Gentoo Linux Reporter: Matthew Thode ( prometheanfire ) <prometheanfire>
Component: HardenedAssignee: SE Linux Bugs <selinux>
Status: RESOLVED DUPLICATE    
Severity: normal CC: swift
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Matthew Thode ( prometheanfire ) archtester Gentoo Infrastructure gentoo-dev Security 2012-01-27 04:04:45 UTC
>=sys-apps/openrc-0.9.8.1 was installed and system rebooted, fails to start /etc/init.d/sysfs because selinux denies it.

I suspect that this is in basepol :D

All you need to do is try and start that service while in enforcing mode.  Tries to create /sys/fs/cgroup/cpuset and /sys/fs/cgroup/cpuacct at the least.
Comment 1 Sven Vermeulen (RETIRED) gentoo-dev 2012-01-29 09:15:50 UTC

*** This bug has been marked as a duplicate of bug 398839 ***