| Summary: | >=sys-apps/openrc-0.9.8.1 has a faulty selinux policy (cgroup support in the policy) | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Matthew Thode ( prometheanfire ) <prometheanfire> |
| Component: | Hardened | Assignee: | SE Linux Bugs <selinux> |
| Status: | RESOLVED DUPLICATE | ||
| Severity: | normal | CC: | swift |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
*** This bug has been marked as a duplicate of bug 398839 *** |
>=sys-apps/openrc-0.9.8.1 was installed and system rebooted, fails to start /etc/init.d/sysfs because selinux denies it. I suspect that this is in basepol :D All you need to do is try and start that service while in enforcing mode. Tries to create /sys/fs/cgroup/cpuset and /sys/fs/cgroup/cpuacct at the least.