Hirdetés

Új hozzászólás Aktív témák

  • Con_Sole

    csendes tag

    válasz bagyusz #51300 üzenetére

    Esetleg nem lehet az probléma, hogy nincs file rendszer "újra cimkézve" (relabel), mivel ez kell a permissive módhoz is ha előtte ki volt kapcsolva a selinux. (bár ha jól értettem akkor inkább teljesen ki akarod kapcsolni alapból mely esetben a "androidboot.selinux=permissive" helyett a selinux=0 vagy SELINUX=disabled parancsot kellene használni, mivel a permissive mód nem kapcsolja ki csak enforce helyett logolásra vált):

    "Re-Enabling SELinux
    If you've disabled SELinux as in the section above, and you want to enable it again then you've got a bit of work to do. The problem will be that files created or changed when SELinux was disabled won't have the correct file labels on them - if you just reboot in enforcing mode then a lot of stuff won't work properly.

    What you need to do is to enable SELinux by editing /etc/selinux/config (for Fedora/RedHat) or by adding selinux=1 to the kernel boot line, then boot into permissive mode, then relabel everything, and then reboot into (or simply switch to) enforcing mode.

    After booting into permissive mode, run
    fixfiles relabel

    Alternatively, in Fedora and RedHat Enterprise Linux you can run
    touch /.autorelabel
    and reboot or put
    autorelabel
    on the boot command line - in both cases the file system gets a full relabel early in the boot process. Note that this can take quite some time for systems with a large number of files.

    After relabelling the filesystem, you can switch to enforcing mode (see above) and your system should be fully enforcing again."

    http://www.crypt.gen.nz/selinux/disable_selinux.html#DIS4

Új hozzászólás Aktív témák