[SOLVED] restorecon and /.autorelabel have no effect and take no time

Installing, Configuring, Troubleshooting server daemons such as Web and Mail
Post Reply
simonb
Posts: 14
Joined: 2005/02/15 13:37:53

[SOLVED] restorecon and /.autorelabel have no effect and tak

Post by simonb » 2010/08/05 14:11:14

I restored a whole filesystem from a backup using rdiff-backup and made it bootable from a modified CentOS 5 CD ROM.

All works well except all the files have SeLinux context of
root:object_r:file_t:s0

I tried rebooting with .autorelable and it seems to take no time and reboots immediately after starting. After, there is no change in the contexts of the files.

I also tried fixfiles and restorecon with and without selinux enabled and in all cases it takes no time and returns no error code i.e. it does nothing. Nothing in the system log either.

How do I get my filesystem back in shape for SeLi nux?

User avatar
TrevorH
Forum Moderator
Posts: 29490
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: restorecon and /.autorelabel have no effect and take no time

Post by TrevorH » 2010/08/05 16:49:30

/.autorelable or /.autorelabel? Your subject and message body have different spellings and the one in the subject will do something and the one in the body will be ignored.

If you are using /.autorelabel then is selinux in enforcing, permissive or disabled mode? From reading /etc/rc.sysinit it seems that if /sbin/init it wrongly labelled then you will need to use /.autorelabel twice, once to set /sbin/init to the right label followed by a reboot to really relabel things.

I don't think you can relabel with selinux disabled, it's most likely to work in permissive mode.

simonb
Posts: 14
Joined: 2005/02/15 13:37:53

Re: restorecon and /.autorelabel have no effect and take no time

Post by simonb » 2010/08/10 10:44:18

Thanks.

I think the problem was with /sbin/init. I did spell autorelabel correctly (except in my post) and it was deleted on boot. Probably all I needed to do was run it again.

I eventually solved the problem by recovering the backup with selinux disabled and backing up with full extended attribute information, which rdiff-backup can do when it finds the pyxattr module. Then there is nothing left to relabel when I reboot as it is all intact.

User avatar
AlanBartlett
Forum Moderator
Posts: 9324
Joined: 2007/10/22 11:30:09
Location: ~/Earth/UK/England/Suffolk
Contact:

Re: [SOLVED] restorecon and /.autorelabel have no effect and take no time

Post by AlanBartlett » 2010/08/10 17:40:32

Thank you for reporting back.

For posterity, this thread is marked [SOLVED].

Post Reply

Return to “CentOS 5 - Server Support”