Wind River Support Network


LIN6-7490 : [wrinstaller6]SELinux is in permissive mode after installing CGP ISO

Created: May 21, 2014    Updated: Dec 3, 2018
Resolved Date: May 24, 2014
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Target-Installer


 SELinux in permissive mode after installing CGP ISO

After installing a CGP ISO image, the selinux is in permissive as default. Should be in enforcing mode.

SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             wr-mls
Current mode:                   permissive
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      28

There are a lot of avc denied and security_validate_transition denied message when booting target. Please see installer_cgl_dmesg.log in the attachment.

Steps to Reproduce

 1. project1:configure --enable-board=intel-x86-64 --enable-kernel=cgl --enable-rootfs=glibc-cgl+installer-support --with-sstate-dir=/buildarea1/build/SSTATE_CACHE --enable-bootimage=ext4
2. make all
3. project2: configure --enable-board=intel-x86-64 --enable-kernel=standard --enable-rootfs=wr-installer --enable-target-installer=yes --with-installer-target-build=/WRINSTALLER/0519/build_prj/combo1-cgl --enable-bootimage=iso
4. make all
5. Install CGP ISO image through VirtualBox. 

Other Downloads

Live chat