The Fourth Path

Hang Saat Synchronizing Hardisk Sebelum System Halt

Posted in Fedora 7, How to by nmutiara on 2008/03/30

Setelah fresh install F7 dan system update, F7 saya mengalami hang pada saat synchronizing hardisk sebelum shut down.

Setelah ditelusuri, ternyata setiap login ke sebuah user di F7, selalu ada SELinux alert seperti ini:

Summary
SELinux is preventing access to files with the default label, default_t.

Detailed Description
SELinux permission checks on files labeled default_t are being denied.
These files/directories have the default label on them. This can indicate a
labeling problem, especially if the files being referred to are not top
level directories. Any files/directories under standard system directories,
/usr, /var. /dev, /tmp, ..., should not be labeled with the default label.
The default label is for files/directories which do not have a label on a
parent directory. So if you create a new directory in / you might
legitimately get this label.

Allowing Access
If you want a confined domain to use these files you will probably need to
relabel the file/directory with chcon. In some cases it is just easier to
relabel the system, to relabel execute: "touch /.autorelabel; reboot"

Additional Information

Source Context system_u:system_r:procmail_t
Target Context system_u:object_r:default_t
Target Objects root [ dir ]
Affected RPM Packages procmail-3.22-19.fc7
[application]filesystem-2.4.6-1.fc7 [target]
Policy RPM selinux-policy-2.6.4-8.fc7
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.default
Host Name localhost.localdomain
Platform Linux localhost.localdomain 2.6.21-1.3194.fc7 #1
SMP Wed May 23 22:35:01 EDT 2007 i686 i686
Alert Count 10
First Seen Fri 05 Oct 2007 06:29:03 PM SGT
Last Seen Sat 10 Nov 2007 04:10:29 AM SGT
Local ID c6a2c282-222d-4427-b15d-b18080fb07df
Line Numbers

Raw Audit Messages

avc: denied { search } for comm="procmail" dev=sda3 egid=0 euid=0
exe="/usr/bin/procmail" exit=-13 fsgid=0 fsuid=0 gid=0 items=0 name="root"
pid=21116 scontext=system_u:system_r:procmail_t:s0 sgid=0
subj=system_u:system_r:procmail_t:s0 suid=0 tclass=dir
tcontext=system_u:object_r:default_t:s0 tty=(none) uid=0

Solusinya, ketik

# touch /.autorelabel; reboot

sebagai root di terminal window. Setelah itu, komputer akan shut down dengan lancar… Untuk shut down berikutnya, tidak perlu ketik seperti di atas lagi.

Sumber: Fedora Forum

Tagged with: , , ,

Leave a Reply