SELinux in permissive mode after installing CGP ISO After installing a CGP ISO image, the selinux is in permissive as default. Should be in enforcing mode. sestatus SELinux status: enabled SELinuxfs mount: /sys/fs/selinux SELinux root directory: /etc/selinux Loaded policy name: wr-mls Current mode: permissive Mode from config file: enforcing Policy MLS status: enabled Policy deny_unknown status: allowed Max kernel policy version: 28 There are a lot of avc denied and security_validate_transition denied message when booting target. Please see installer_cgl_dmesg.log in the attachment.
1. project1:configure --enable-board=intel-x86-64 --enable-kernel=cgl --enable-rootfs=glibc-cgl+installer-support --with-sstate-dir=/buildarea1/build/SSTATE_CACHE --enable-bootimage=ext4 2. make all 3. project2: configure --enable-board=intel-x86-64 --enable-kernel=standard --enable-rootfs=wr-installer --enable-target-installer=yes --with-installer-target-build=/WRINSTALLER/0519/build_prj/combo1-cgl --enable-bootimage=iso 4. make all 5. Install CGP ISO image through VirtualBox.
