According to the thread, I did the followings, now, when running " dmesg"
the avc lines deducted to 200 lines from more than 700 lines initially, a
little progress :)
Here is what I did.
(1)#cp -a /dev /mnt/usb
(2)cd /mnt/usb/
#setfilecon system_u:object_r:console_device_t console
#setfilecon system_u:object_r:security_t selinux
(3)boot from 2005.1 selinux livecd, copy /mnt/usb/dev back
(4)reboot
On 9/13/07, guo walter <[EMAIL PROTECTED]> wrote:
>
> Or just a specific directory ( dont know whhic directory ) instead of
>
> On 9/13/07, guo walter < [EMAIL PROTECTED] > wrote:
> >
> > Thanks for your answer, now it seems more clear. I downloaded
> > hardened-livecd-2005.1.iso , but I can not use rlpkg to re-label
> > directly from the livedcd system.
> >
> > How about this idea:
> > (1) cp -a / to a USB Storage disk with jfs file system
> > (2) mount the USB Storage jfs file system
> > (3) rlpkg -a -r
> > (4) boot from the hardened-livecd-2005.1.iso, cp -a the new labled
> > system back.
> > Can these steps solved the problem?
> >
> >
> > Walter
> >
> >
> >
> > On 9/11/07, Remy Bosch <[EMAIL PROTECTED] > wrote:
> > >
> > > guo walter wrote:
> > > > Yep, my question should be the same thing with thread, and it seems
> > > > there no clear solution by now, doesn't it?
> > >
> > > Alas, no. Not as simple as in the past without selinux ;)
> > > The thing here, is that at some point have a running system, but there
> > >
> > > are a few directories/files that need labeling, which cannot be done
> > > straight forward, because they're used. You need the bare filesystem
> > > as-is, so mount your root somewhere else and label them as wanted. It
> > > takes care of the first warnings. After that, you'll have to ask/read
> > > around as information is a bit fragmented. There isn't a full easy
> > > howto
> > > yet, though there are some very good starter point's - sorry, I don't
> > > have the adresses at hand here.
> > >
> > > Good luck,
> > >
> > >
> > > Remy
> > >
> > > --
> > > [EMAIL PROTECTED] mailing list
> > >
> > >
> >
>
