SE-Linux setup failure

Star Rider

New Member
Joined
Sep 10, 2021
Messages
18
Reaction score
16
Credits
192
Hello guys!

I am using Debian GNU/Linux 11. Even though Linux is already a very secure OS, I need today a higher security level again. I am trying to setup SE-Linux, following the steps described in this article: https://wiki.debian.org/SELinux/Setup
Everything runs fine, until I try to reboot my laptop: SE-Linux hangs at relabeling files.
The /data directory is an additional drive (256 Go SSD NVMe) mounted at startup (for more details see the /etc/fstab screenshot).
I guess there is something wrong, so I stopped the task (ctrl-C) to skip this step and troubleshoot my setup. But I got another error message.
For now my laptop runs fine without SE-Linux enabled, but I really need this security add-on.

I attached a screenshot of the hanging relabeling, of the ctrl-C error message and of my GRUB command line (at this time, for now I disabled SE-Linux).
 

Attachments

  • fstab_screenshot.png
    fstab_screenshot.png
    110.2 KB · Views: 64
  • IMG_20220305_113733.jpg
    IMG_20220305_113733.jpg
    3.2 MB · Views: 64
  • IMG_20220305_113753.jpg
    IMG_20220305_113753.jpg
    2.8 MB · Views: 62
  • IMG_20220305_113924.jpg
    IMG_20220305_113924.jpg
    2.9 MB · Views: 62


f33dm3bits

Gold Member
Gold Supporter
Joined
Dec 11, 2019
Messages
4,900
Reaction score
3,526
Credits
35,667
If you really want to use selinux, use Fedora or Rocky Linux(or another Rhel clone) because Redhat has optimized selinux to work with a good sane of defaults over the years. Since Debian isn't chances are you will run into things like these and maybe more things unless you know what you are doing with selinux.
 
Last edited:

KGIII

Super Moderator
Staff member
Gold Supporter
Joined
Jul 23, 2020
Messages
6,712
Reaction score
5,862
Credits
54,049
I haven't used Debian much lately, so my memory is perhaps fuzzy, but doesn't Debian do the whole AppArmor thing instead of SELinux?
 
$100 Digital Ocean Credit
Get a free VM to test out Linux!

Linux.org Hosting Donations
Consider making a donation

Members online


Top