Image

Imagejkndrkn wrote in Imagelinux

SELinux on Debian

Hello Friends

I'm working on getting SELinux working on a Debian amd64 machine.

I am following the directions here: http://wiki.debian.org/SELinux/Setup

Everything has gone fine, except for this step:
jderiksen@dev ~ $ sudo check-selinux-installation 
getfilecon:  getfilecon(/proc/1) failed
SELinux is not enabled.
Could not read the domain of PID 1.
Old style ttys were found.
Dynamic motd updating is enabled

I'm stuck here, and Googling around hasn't been entirely helpful.

Any pointers?

Edit: Located a problem in /boot/grub/menu.lst: kopt was incorrectly set. After correctly passing the selinux=1 bootparam, I am receiving the following:
jderiksen@dev ~ $ sudo check-selinux-installation 
../proc/1       system_u:system_r:kernel_t:s0..
The init process (PID 1) is running in an incorrect domain.
There were 35 processes found running in the kernel domain.
Dynamic motd updating is enabled

This seems more a warning than an error. Is it safe to proceed? Should I work on eliminating this warning? Thanks!