Hi all, I've recently converted one of our firewall/router/proxies to a hardened system.
I changed the profile, rebuilt a kernel with selinux and recompiled all necessary packages. Everything seems to be ok until I set enforcing mode to on, then I get locked out of everything: permission denied on many binaries, ls, cat, echo etc. permission on some directories ie, /root missing. unable to login as perms on bash are gone. I also notice that courier-imap refuses to run in the right context and always runs as system_u:system_r:initrc_t. I previously installed a virtual machine with selinux etc to see if I could get my head round it and it all worked fine. What could be the reason for me getting locked out of my system when enforce mode is enabled? BTW I have relabeled filesystems several times as it looked originally like things just weren't labeled, however they seem fine until enforce mode is enabled. Grateful for any help. Thanks Matt
