Other • selinux in raspbeerrypi

The buildroot builds the raspberry pi 3B system with selinux turned on in permissive mode. However, it cannot be started normally after programming. It is reasonable to say that the perssive mode only records, and the policy cannot be rejected. How can I log in?
3.820386] SELinux: Class mctp_socket not defined in policy.
[ 3.820413] SELinux: Class anon_inode not defined in policy.
[ 3.820418] SELinux: the above unknown classes and permissions will be denied
[ 3.855189] SELinux: policy capability network_peer_controls=1
[ 3.855206] SELinux: policy capability open_perms=1
[ 3.855212] SELinux: policy capability extended_socket_class=1
[ 3.855218] SELinux: policy capability always_check_network=0
[ 3.855224] SELinux: policy capability cgroup_seclabel=1
[ 3.855230] SELinux: policy capability nnp_nosuid_transition=1
[ 3.855236] SELinux: policy capability genfs_seclabel_symlinks=0
[ 3.855242] SELinux: policy capability ioctl_skip_cloexec=0
[ 4.049865] audit: type=1403 audit(4.039:2): auid=4294967295 ses=4294967295 lsm=selinux res=1
[ 4.092936] EXT4-fs (mmcblk0p2): re-mounted. Opts: . Quota mode: none.
[ 4.099767] usb 1-1.1: new high-speed USB device number 3 using dwc_otg
[ 4.230359] usb 1-1.1: New USB device found, idVendor=0424, idProduct=ec00, bcdDevice= 2.00
[ 4.230382] usb 1-1.1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 4.234365] smsc95xx v2.0.0
[ 4.308334] audit: type=1400 audit(4.289:3): avc: denied { read write } for pid=138 comm="syslogd" path="/dev/null" dev="devtmpfs" ino=4 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 4.313822] audit: type=1400 audit(4.299:4): avc: denied { getattr } for pid=136 comm="modprobe" name="/" dev="proc" ino=1 scontext=system_u:system_r:kmod_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 4.319728] audit: type=1400 audit(4.299:5): avc: denied { read } for pid=138 comm="syslogd" name="log" dev="mmcblk0p2" ino=4847 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 4.319763] audit: type=1400 audit(4.299:6): avc: denied { search } for pid=138 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4.319780] audit: type=1400 audit(4.299:7): avc: denied { write } for pid=138 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4.319797] audit: type=1400 audit(4.299:8): avc: denied { add_name } for pid=138 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 4.319814] audit: type=1400 audit(4.299:9): avc: denied { create } for pid=138 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 4.319831] audit: type=1400 audit(4.299:10): avc: denied { append open } for pid=138 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 4.405122] SMSC LAN8700 usb-001:003:01: attached PHY driver (mii_bus:phy_addr=usb-001:003:01, irq=POLL)
[ 4.406998] smsc95xx 1-1.1:1.0 eth0: register 'smsc95xx' at usb-3f980000.usb-1.1, smsc95xx USB 2.0 Ethernet, b8:27:eb:0d:e4:db

Statistics: Posted by maqa — Thu Jul 10, 2025 2:17 am

---