On Wed, 2005-11-16 at 13:56 -0500, Steve Grubb wrote: That just means that you previously had the selinux testsuite policy loaded, and then later removed it, thereby invalidating that type (and thus any incore inode labels that contained it). -- Stephen Smalley National Security Agency

On Wed, 2005-11-16 at 17:12 -0500, Steve Grubb wrote: The message could be clearer, particularly for the common case (e.g. SELinux: inode %ld on dev %s has invalid security context %s, treating as unlabeled.) It is presently a printk in hooks.c:inode_doinit_with_dentry; could be converted to using audit_log. There are a number of printks performed by hooks.c that are potentially candidates for using the audit system instead. The fix for the reported error is to relabel the inode to a valid security context. Until that happens, SELinux treats it as having the unlabeled context and thus makes it inaccessible to unprivileged confined processes. -- Stephen Smalley National Security Agency