selinux - changing file attributes back to targeted?

dansawyer · 02-14-2007, 05:07 PM

All,

The system is fc6 upgraded as of 2/12/07. The kernel is a custom 2.6.19.2. Today during a reboot selinux apparently re-configured the file system to strict (this took about 10 minutes). I reset /selinux/config back to targeted and rebooted. The system is not generating "inode_doinit_with_dentry" entries.

1. How can selinux be forced to re-configure attributes to targeted?

2. Are the "inode_doinit_with_dentry" entries a result of the attribute change? If not what is causing them.

- Thanks Dan

unSpawn · 02-15-2007, 05:32 AM

I can't see how "the system" would do this switching from "targeted" to "strict" all by itself: better review what *you* did. If it however did swap all by itself to "strict" then you should open a FC bugtrack item. If you change policies you will have to relabel the system to reflect that. The most consistent way IMHO is to touch /.autorelabel then reboot. Let us know if the "inode_doinit_with_dentry" still show up after a relabel.