Wind River Support Network

HomeDefectsCGP6-363
Fixed

CGP6-363 : Failed to start some daemons(sshd, atd and etc.) with run_init in enforcing mode

Created: Mar 4, 2014    Updated: Mar 11, 2016
Resolved Date: Mar 13, 2014
Found In Version: 6.0
Fix Version: 6.0.0.4
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace
Host OS: Linux Other
Architecture: IA64

Description

Here is the step to reproduce the problem on a qemu86_64 target:

# id -Z
root:sysadm_r:sysadm_t:s0-s15:c0.c1023
# getenforce
Enforcing
# run_init /etc/init.d/sshd status
Authenticating root.
Password: 
/usr/sbin/sshd (pid 2231) is running...
# run_init /etc/init.d/sshd stop  
Authenticating root.
Password: 
Stopping OpenBSD Secure Shell server: sshdstopped /usr/sbin/sshd (pid 2231)
~# run_init /etc/init.d/sshd start
Authenticating root.
Password: 
Starting OpenBSD Secure Shell server: sshd
done.

# run_init /etc/init.d/sshd status 
Authenticating root.
Password: 

Here is the comments from Joe:

I doubt this is intentional, and it probably is a defect.  But, why do you have to be enforcing?

I tried stopping and starting sshd as root and it does not seem right that it is running after system init, and I can stop it, but I cannot start it again.

Joe

Steps to Reproduce

1) configure with:
--enable-board=qemux86-64 --enable-rootfs=glibc-cgl --enable-kernel=cgl --enable-parallel-pkgbuilds=4 --enable-jobs=4

2) build
$ make fs

3) start target with ext3 (ensure that selinux is enable and enforcing mode)
$ make runqemu

4) run on the target:
root@localhost:~# id -Z
root:sysadm_r:sysadm_t:s0-s15:c0.c1023
root@localhost:~# getenforce 
Enforcing
root@localhost:~# run_init /etc/init.d/sshd status
root@localhost:~# run_init /etc/init.d/sshd stop
root@localhost:~# run_init /etc/init.d/sshd start
root@localhost:~# run_init /etc/init.d/sshd status
root@localhost:~# run_init /etc/init.d/sshd restart
root@localhost:~# run_init /etc/init.d/sshd status
(repeat to restart sshd and check if sshd restart successfully)
Live chat
Online