search

archlinuxhardened / selinux

PKGBUILDs to build SELinux enabled packages for Arch Linux
145 stars 25 forks source link

[Help needed][null-class][login] #96

Closed javlock closed 2 years ago

javlock commented 2 years ago

I am completely new to selinux (I have experience with apparmor), I ask for help with the program /urs/bin/login it works in the context [system_u:system_r:local_login_t] user context [user_u:user_r:user_t]

in theory all users (default context) should be able to login via tty, set up for myself, my home pc

when trying to log into the user (tty) after entering the name, the process crashes (no access) using audit2allow I found out what was missing (added to this point): there was a message: 'libsepol.sepol_string_to_security_class: unrecognized class (null)'

in require {
class (null) 0x2;
}

and further

# ============= local_login_t ==============
allow local_login_t initrc_t: (null) 0x2;

how is this possible and what to do in such cases? null-class

javlock commented 2 years ago

I close it, apparently there was a broken log file. Now this does not happen