[R 4.3-RC1] SELinux problems after upgrade

User Support
1

Hello,

After upgrade from R4.2 to R4.3 it was not possible to boot with latest kernel. I booted with previous, disable selinux at /etc/selinux/config and make some steps sudo restorecon -R -F /etc and sudo touch /.autorelabel.

Now, I can boot with new kernel, but after I enable selinux (eforcing), I can’t use any qubes (can’t run terminal or anything)
I see this at the logs Aug 14 03:45:23 dom0 xfce4-terminal[8116]: Failed to connect to session manager: Failed to connect to the session manager: SESSION_MANAGER environment variable not defined

(this is when selinux=enforcing)

Please help fix SELINUX 4.3 policies.

2

I edited the title to add -RC1 so people are not confused later when 4.3 is out, and currently people won’t think 4.3 is out :slight_smile:

2 Likes
3 
Aug 14 03:39:46 dom0 kernel: audit: type=1105 audit(1755157186.635:282): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_unix acct="user" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success'
Aug 14 03:39:46 dom0 runuser[7999]: pam_unix(runuser:session): session opened for user user(uid=1000) by (uid=0)
Aug 14 03:39:47 dom0 runuser[7758]: pam_unix(runuser:session): session closed for user user
Aug 14 03:39:47 dom0 audit[7758]: USER_END pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="user" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success'
Aug 14 03:39:47 dom0 kernel: audit: type=1106 audit(1755157187.689:283): pid=7758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="user" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success'
Aug 14 03:39:55 dom0 audit[7999]: USER_END pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_unix acct="user" exe="/usr/sbin/runuser" hostname=? addr=? terminal=? res=success'

This related?

4

how to fix?

5

not sure what helped.

  • kernels upgrade from f37 to f41 or grub rebuild or sudo fixfiles -B onboot this command…

But I tried to set enforcing again at selinux config and system can boot now.

But… sudo sestatus show that SELINUX is disabled :slight_smile:
Because of that not sure that issue fixed and it now not another issue :-))))