{"action":"created","issue":{"url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/84","labels_url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/84/labels{/name}","comments_url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/84/comments","events_url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/84/events","html_url":"https://github.com/lorengordon/ash-linux-formula/issues/84","id":68763406,"number":84,"title":"SELinux policy causes system to fail to start after reboot","user":{"login":"lorengordon","id":8457307,"avatar_url":"https://avatars.githubusercontent.com/u/8457307?v=3","gravatar_id":"","url":"https://api.github.com/users/lorengordon","html_url":"https://github.com/lorengordon","followers_url":"https://api.github.com/users/lorengordon/followers","following_url":"https://api.github.com/users/lorengordon/following{/other_user}","gists_url":"https://api.github.com/users/lorengordon/gists{/gist_id}","starred_url":"https://api.github.com/users/lorengordon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lorengordon/subscriptions","organizations_url":"https://api.github.com/users/lorengordon/orgs","repos_url":"https://api.github.com/users/lorengordon/repos","events_url":"https://api.github.com/users/lorengordon/events{/privacy}","received_events_url":"https://api.github.com/users/lorengordon/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2015-04-15T19:04:00Z","updated_at":"2015-04-15T22:52:09Z","closed_at":null,"body":"After applying the ash-linux.stig policy and rebooting, the system fails to start.\r\n\r\nFrom the AWS System Log:\r\n\r\n```\r\ndracut: Loading SELinux policy\r\ntype=1404 audit(1429122099.471:2): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295\r\ntype=1300 audit(1429122099.471:2): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7a9df2e0 a2=1 a3=7fff7a9de060 items=0 ppid=1 pid=259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"load_policy\" exe=\"/sbin/load_policy\" subj=kernel key=(null)\r\ndracut: SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.24: No such file or directory /sbin/load_policy: Can't load policy and enforcing mode requested: No such file or directory\r\ndracut Warning: Initial SELinux policy load failed.\r\ndracut FATAL: Initial SELinux policy load failed. Machine in enforcing mode. To disable selinux, add selinux=0 to the kernel command line.\r\ndracut Warning: \r\n```"},"comment":{"url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/comments/93590916","html_url":"https://github.com/lorengordon/ash-linux-formula/issues/84#issuecomment-93590916","issue_url":"https://api.github.com/repos/lorengordon/ash-linux-formula/issues/84","id":93590916,"user":{"login":"lorengordon","id":8457307,"avatar_url":"https://avatars.githubusercontent.com/u/8457307?v=3","gravatar_id":"","url":"https://api.github.com/users/lorengordon","html_url":"https://github.com/lorengordon","followers_url":"https://api.github.com/users/lorengordon/followers","following_url":"https://api.github.com/users/lorengordon/following{/other_user}","gists_url":"https://api.github.com/users/lorengordon/gists{/gist_id}","starred_url":"https://api.github.com/users/lorengordon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lorengordon/subscriptions","organizations_url":"https://api.github.com/users/lorengordon/orgs","repos_url":"https://api.github.com/users/lorengordon/repos","events_url":"https://api.github.com/users/lorengordon/events{/privacy}","received_events_url":"https://api.github.com/users/lorengordon/received_events","type":"User","site_admin":false},"created_at":"2015-04-15T22:52:09Z","updated_at":"2015-04-15T22:52:09Z","body":"Yep, that's what fixed it for me, too. The issue only cropped up after a reboot (the states applied fine and the system was operational otherwise), and this was the first time I tested the reboot after applying the full stig baseline, so /me shrugs, I don't have a valid point of comparison."}}