Emergency Mode when SELinux is enforcing since upgrade to F24

asked 2016-07-03 10:03:50 -0600

fat-lobyte
128 ●4 ●10 ●16

updated 2016-07-04 09:54:52 -0600

Hi!

Since the upgrade, if SELinux is set to enforcing, bootup failed and I am greeted with

Welcome to emergency mode

Where I get to enter my root password.

If I set SELinux to permissive (either by setting /etc/selinux/config SELINUX=permissive or by adding enforcing=0 to the kernel command line), the boot succeeds.

Here is the journal and the audit.log of a boot in permissive mode (boot succeeds):

Here is the journal and the audit.log of a boot in enforcing mode (boot fails):

Does anyone know how to get SELinux to not break my boot?

Edit: This has been solved, please check my answer

edit retag flag offensive close merge delete

add a comment

0

answered 2016-07-04 09:53:22 -0600

fat-lobyte
128 ●4 ●10 ●16

I solved my issue, and it was fairly simple. To fix it, in emergency mode, run the following command:

restorecon -R -v /boot/efi/

Note that this has to be done in emergency mode, because when the boot completes successfully, the context for the /boot/efi directory is masked by the systemd-automount as dosfs_t or automount_t and any changes will be ignored.

The original problem was that the directory was created manually, and had its context set to unconfined_u:object_r:unlabeled_t:s0

This is incorrect, and resetting the context back to system_u:object_r:boot_t:s0 fixes the problem.

edit flag offensive delete link

add a comment

0

answered 2016-08-25 08:24:58 -0600

mjbright
1 ●1 ●1

I have a similar problem (after a dnf upgrade, on a running F24 system).

Booting takes me to emergency_mode but I can't login as "/bin/bash: Permission Denied".

If I disable selinux I can boot OK.

So is there a way I can boot from live USB and apply restorecon to my root partition? Any other idea?

edit flag offensive delete link

Comments

Add enforcing=0 and autorelabel=1 to the boot command line.

ssieb ( 2016-09-02 15:09:52 -0600 )edit

add a comment

Emergency Mode when SELinux is enforcing since upgrade to F24

2 Answers

Comments

Question Tools

Stats

Related questions

Emergency Mode when SELinux is enforcing since upgrade to F24 edit

2 Answers

Comments

Question Tools

Stats

Related questions

Emergency Mode when SELinux is enforcing since upgrade to F24