Linda Knippers wrote:
I'm running the .27 kernel and the 1.2.2 tools on an x86_64
(Xeon/EM64T) SMP box with the targeted policy in enforcing mode.
I tried to reproduce the problem discussed yesterday (the very fist
rule doesn't take and the rest do) but it seems to work fine on my
system.
I've been running mostly on an i686 (Intel) with the .27 kernel and
1.2.2 tools with the MLS policy. I've tested this on an x86_64 (AMD
opteron) and see this problem too. However, this problem does NOT exist
when using targeted policy, so it is most likely an MLS SELinux issue.
My MLS policy is 2.2.42
Can you describe more about your configuration and provide exact
steps
to reproduce the problem?
1) Reboot your system (so you've a clean slate)
2) Login (tty or pty, doesn't matter, I've done both)
3) auditctl -l
Error sending rule list request (Operation not permitted)
4) auditctl -l
No rules (or whatever you expect to see)
If you and Loulwa are seeing it but George
(at least not on ppc64) and I aren't, there's got to be something
different about what we're doing or what we're doing it on.
Loulwa sees this problem (I used her x86_64 machine above) and I have
just seen this problem on George's machine (he was originally not using
the MLS policy).
Therefore, this evidence leads me to believe its an issue in the MLS
policy, although I do not what the problem is.
Thanks,
Mike