On Tue, Aug 21, 2012 at 09:14:39AM +0200, [email protected] wrote:
> Hello to all the list. I need your help to understand what's wrong here.
> I tried to convert my laptop to a selinux profile (targeted) several
> times following the documentation step by step.
Hi F.P.
First of all, thanks for trying the SELinux stuff out. I'm pretty sure we
can help you further and fix things so that others don't get the same
problems.
> 1) it seems like some part of hardware can't be revealed in enforcing
> mode: Pulseaudio can't see the soundcard, powerdevil can't see power
> statistics, newly atttached usb drives are ingored. Obviously
> selinux-consolekit, selinux-policykit and selinux-dbus are installed.
It is best to look at the AVC denials that come up when you launch
pulseaudio, powerdevel etc. one by one. Providing all possible denials will
make it much more difficult to fine-tune the problems.
What I usually do to debug issues is to do:
~# tail -f /var/log/avc.log
Then perform one activity (1) that doesn't work. For instance, try to play
an MP3/OGG file which fails. Then look at the denials that came up right
when you did that action.
> 3) Logging in root with su or kdesu (in X environment) takes too long:
> if the password I write is ok, it takes even some minute to give me the
> root shell.
Here too looking at the AVC denials that come up right then would be
interesting. However, in this case it is best to also provide the output of
"id -Z" right before you switch root, and right after.
Wkr,
Sven Vermeulen
