After installing SELinux, I was locked out of Ubuntu 18.10. Log in screen never appeared. What am i missing...
After reading a lot of articles, I heard SELinux is a great way to tighten the security. So I decided to install SELinux and I used below command:
pranav@inspiron-5548:~$ sudo apt-get install selinux
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
policycoreutils selinux-policy-dummy
selinux-utils
The following packages will be REMOVED:
apparmor gnome-software-plugin-snap snapd
The following NEW packages will be installed:
policycoreutils selinux selinux-policy-dummy
selinux-utils
0 upgraded, 4 newly installed, 3 to remove and 0 not upgraded.
Need to get 544 kB of archives.
After this operation, 65.1 MB disk space will be freed.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-utils amd64 2.8-1build1 [81.9 kB]
Get:2 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 policycoreutils amd64 2.8-1 [450 kB]
Get:3 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux all 1:0.11 [11.2 kB]
Get:4 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B]
Fetched 544 kB in 3s (211 kB/s)
Preconfiguring packages ...
(Reading database ... 193413 files and directories currently installed.)
Removing gnome-software-plugin-snap (3.30.2-0ubuntu8) ...
Removing snapd (2.37.1+18.10) ...
Removing apparmor (2.12-4ubuntu8) ...
Selecting previously unselected package selinux-utils.
(Reading database ... 193322 files and directories currently installed.)
Preparing to unpack .../selinux-utils_2.8-1build1_amd64.deb ...
Unpacking selinux-utils (2.8-1build1) ...
Selecting previously unselected package policycoreutils.
Preparing to unpack .../policycoreutils_2.8-1_amd64.deb ...
Unpacking policycoreutils (2.8-1) ...
Selecting previously unselected package selinux.
Preparing to unpack .../selinux_1%3a0.11_all.deb ...
Unpacking selinux (1:0.11) ...
Selecting previously unselected package selinux-policy-dummy.
Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ...
Unpacking selinux-policy-dummy (0.1) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for desktop-file-utils (0.23-3ubuntu3) ...
Setting up selinux-utils (2.8-1build1) ...
Processing triggers for bamfdaemon (0.5.3+18.04.20180207.2-0ubuntu1) ...
Rebuilding /usr/share/applications/bamf-2.index...
Setting up selinux-policy-dummy (0.1) ...
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for man-db (2.8.4-2) ...
Processing triggers for gnome-menus (3.13.3-11ubuntu2) ...
Setting up policycoreutils (2.8-1) ...
selinux-autorelabel-mark.service is a disabled or a static unit, not starting it.
Setting up selinux (1:0.11) ...
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-4.18.0-16-generic
Found initrd image: /boot/initrd.img-4.18.0-16-generic
Found linux image: /boot/vmlinuz-4.18.0-15-generic
Found initrd image: /boot/initrd.img-4.18.0-15-generic
Found Windows Boot Manager on /dev/sda2@/EFI/Microsoft/Boot/bootmgfw.efi
Adding boot menu entry for EFI firmware configuration
done
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for initramfs-tools (0.131ubuntu15.1) ...
update-initramfs: Generating /boot/initrd.img-4.18.0-16-generic
And then restarted my computer. The following images appear:
First thing that appears

Second image

Note that this machine is dual booted with Windows 10.
After adding selinux=0 in the grub menu, I was able to gain back my PC running.
What am I missing here? What should I do? Should I uninstall SELinux or manage it to work properly?
dual-boot login-screen 18.10 selinux
|
show 6 more comments
After reading a lot of articles, I heard SELinux is a great way to tighten the security. So I decided to install SELinux and I used below command:
pranav@inspiron-5548:~$ sudo apt-get install selinux
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
policycoreutils selinux-policy-dummy
selinux-utils
The following packages will be REMOVED:
apparmor gnome-software-plugin-snap snapd
The following NEW packages will be installed:
policycoreutils selinux selinux-policy-dummy
selinux-utils
0 upgraded, 4 newly installed, 3 to remove and 0 not upgraded.
Need to get 544 kB of archives.
After this operation, 65.1 MB disk space will be freed.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-utils amd64 2.8-1build1 [81.9 kB]
Get:2 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 policycoreutils amd64 2.8-1 [450 kB]
Get:3 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux all 1:0.11 [11.2 kB]
Get:4 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B]
Fetched 544 kB in 3s (211 kB/s)
Preconfiguring packages ...
(Reading database ... 193413 files and directories currently installed.)
Removing gnome-software-plugin-snap (3.30.2-0ubuntu8) ...
Removing snapd (2.37.1+18.10) ...
Removing apparmor (2.12-4ubuntu8) ...
Selecting previously unselected package selinux-utils.
(Reading database ... 193322 files and directories currently installed.)
Preparing to unpack .../selinux-utils_2.8-1build1_amd64.deb ...
Unpacking selinux-utils (2.8-1build1) ...
Selecting previously unselected package policycoreutils.
Preparing to unpack .../policycoreutils_2.8-1_amd64.deb ...
Unpacking policycoreutils (2.8-1) ...
Selecting previously unselected package selinux.
Preparing to unpack .../selinux_1%3a0.11_all.deb ...
Unpacking selinux (1:0.11) ...
Selecting previously unselected package selinux-policy-dummy.
Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ...
Unpacking selinux-policy-dummy (0.1) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for desktop-file-utils (0.23-3ubuntu3) ...
Setting up selinux-utils (2.8-1build1) ...
Processing triggers for bamfdaemon (0.5.3+18.04.20180207.2-0ubuntu1) ...
Rebuilding /usr/share/applications/bamf-2.index...
Setting up selinux-policy-dummy (0.1) ...
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for man-db (2.8.4-2) ...
Processing triggers for gnome-menus (3.13.3-11ubuntu2) ...
Setting up policycoreutils (2.8-1) ...
selinux-autorelabel-mark.service is a disabled or a static unit, not starting it.
Setting up selinux (1:0.11) ...
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-4.18.0-16-generic
Found initrd image: /boot/initrd.img-4.18.0-16-generic
Found linux image: /boot/vmlinuz-4.18.0-15-generic
Found initrd image: /boot/initrd.img-4.18.0-15-generic
Found Windows Boot Manager on /dev/sda2@/EFI/Microsoft/Boot/bootmgfw.efi
Adding boot menu entry for EFI firmware configuration
done
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for initramfs-tools (0.131ubuntu15.1) ...
update-initramfs: Generating /boot/initrd.img-4.18.0-16-generic
And then restarted my computer. The following images appear:
First thing that appears

Second image

Note that this machine is dual booted with Windows 10.
After adding selinux=0 in the grub menu, I was able to gain back my PC running.
What am I missing here? What should I do? Should I uninstall SELinux or manage it to work properly?
dual-boot login-screen 18.10 selinux
You try to boot a Live environment and get rid ofselinuxagain. You also could try to addselinux=0to the kernel append in GRUB and then boot.
– Thomas
Mar 9 at 9:38
1
You might want to try to addselinux=0first. Please see askubuntu.com/questions/19486/… for how to do that.
– Thomas
Mar 9 at 10:02
1
Yes, remove that from GRUB.
– Thomas
2 days ago
1
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
1
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago
|
show 6 more comments
After reading a lot of articles, I heard SELinux is a great way to tighten the security. So I decided to install SELinux and I used below command:
pranav@inspiron-5548:~$ sudo apt-get install selinux
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
policycoreutils selinux-policy-dummy
selinux-utils
The following packages will be REMOVED:
apparmor gnome-software-plugin-snap snapd
The following NEW packages will be installed:
policycoreutils selinux selinux-policy-dummy
selinux-utils
0 upgraded, 4 newly installed, 3 to remove and 0 not upgraded.
Need to get 544 kB of archives.
After this operation, 65.1 MB disk space will be freed.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-utils amd64 2.8-1build1 [81.9 kB]
Get:2 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 policycoreutils amd64 2.8-1 [450 kB]
Get:3 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux all 1:0.11 [11.2 kB]
Get:4 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B]
Fetched 544 kB in 3s (211 kB/s)
Preconfiguring packages ...
(Reading database ... 193413 files and directories currently installed.)
Removing gnome-software-plugin-snap (3.30.2-0ubuntu8) ...
Removing snapd (2.37.1+18.10) ...
Removing apparmor (2.12-4ubuntu8) ...
Selecting previously unselected package selinux-utils.
(Reading database ... 193322 files and directories currently installed.)
Preparing to unpack .../selinux-utils_2.8-1build1_amd64.deb ...
Unpacking selinux-utils (2.8-1build1) ...
Selecting previously unselected package policycoreutils.
Preparing to unpack .../policycoreutils_2.8-1_amd64.deb ...
Unpacking policycoreutils (2.8-1) ...
Selecting previously unselected package selinux.
Preparing to unpack .../selinux_1%3a0.11_all.deb ...
Unpacking selinux (1:0.11) ...
Selecting previously unselected package selinux-policy-dummy.
Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ...
Unpacking selinux-policy-dummy (0.1) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for desktop-file-utils (0.23-3ubuntu3) ...
Setting up selinux-utils (2.8-1build1) ...
Processing triggers for bamfdaemon (0.5.3+18.04.20180207.2-0ubuntu1) ...
Rebuilding /usr/share/applications/bamf-2.index...
Setting up selinux-policy-dummy (0.1) ...
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for man-db (2.8.4-2) ...
Processing triggers for gnome-menus (3.13.3-11ubuntu2) ...
Setting up policycoreutils (2.8-1) ...
selinux-autorelabel-mark.service is a disabled or a static unit, not starting it.
Setting up selinux (1:0.11) ...
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-4.18.0-16-generic
Found initrd image: /boot/initrd.img-4.18.0-16-generic
Found linux image: /boot/vmlinuz-4.18.0-15-generic
Found initrd image: /boot/initrd.img-4.18.0-15-generic
Found Windows Boot Manager on /dev/sda2@/EFI/Microsoft/Boot/bootmgfw.efi
Adding boot menu entry for EFI firmware configuration
done
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for initramfs-tools (0.131ubuntu15.1) ...
update-initramfs: Generating /boot/initrd.img-4.18.0-16-generic
And then restarted my computer. The following images appear:
First thing that appears

Second image

Note that this machine is dual booted with Windows 10.
After adding selinux=0 in the grub menu, I was able to gain back my PC running.
What am I missing here? What should I do? Should I uninstall SELinux or manage it to work properly?
dual-boot login-screen 18.10 selinux
After reading a lot of articles, I heard SELinux is a great way to tighten the security. So I decided to install SELinux and I used below command:
pranav@inspiron-5548:~$ sudo apt-get install selinux
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Sorry, try again.
[sudo] password for pranav:
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following additional packages will be installed:
policycoreutils selinux-policy-dummy
selinux-utils
The following packages will be REMOVED:
apparmor gnome-software-plugin-snap snapd
The following NEW packages will be installed:
policycoreutils selinux selinux-policy-dummy
selinux-utils
0 upgraded, 4 newly installed, 3 to remove and 0 not upgraded.
Need to get 544 kB of archives.
After this operation, 65.1 MB disk space will be freed.
Do you want to continue? [Y/n] y
Get:1 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-utils amd64 2.8-1build1 [81.9 kB]
Get:2 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 policycoreutils amd64 2.8-1 [450 kB]
Get:3 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux all 1:0.11 [11.2 kB]
Get:4 http://archive.ubuntu.com/ubuntu cosmic/universe amd64 selinux-policy-dummy all 0.1 [1,730 B]
Fetched 544 kB in 3s (211 kB/s)
Preconfiguring packages ...
(Reading database ... 193413 files and directories currently installed.)
Removing gnome-software-plugin-snap (3.30.2-0ubuntu8) ...
Removing snapd (2.37.1+18.10) ...
Removing apparmor (2.12-4ubuntu8) ...
Selecting previously unselected package selinux-utils.
(Reading database ... 193322 files and directories currently installed.)
Preparing to unpack .../selinux-utils_2.8-1build1_amd64.deb ...
Unpacking selinux-utils (2.8-1build1) ...
Selecting previously unselected package policycoreutils.
Preparing to unpack .../policycoreutils_2.8-1_amd64.deb ...
Unpacking policycoreutils (2.8-1) ...
Selecting previously unselected package selinux.
Preparing to unpack .../selinux_1%3a0.11_all.deb ...
Unpacking selinux (1:0.11) ...
Selecting previously unselected package selinux-policy-dummy.
Preparing to unpack .../selinux-policy-dummy_0.1_all.deb ...
Unpacking selinux-policy-dummy (0.1) ...
Processing triggers for mime-support (3.60ubuntu1) ...
Processing triggers for desktop-file-utils (0.23-3ubuntu3) ...
Setting up selinux-utils (2.8-1build1) ...
Processing triggers for bamfdaemon (0.5.3+18.04.20180207.2-0ubuntu1) ...
Rebuilding /usr/share/applications/bamf-2.index...
Setting up selinux-policy-dummy (0.1) ...
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for man-db (2.8.4-2) ...
Processing triggers for gnome-menus (3.13.3-11ubuntu2) ...
Setting up policycoreutils (2.8-1) ...
selinux-autorelabel-mark.service is a disabled or a static unit, not starting it.
Setting up selinux (1:0.11) ...
Sourcing file `/etc/default/grub'
Generating grub configuration file ...
Found linux image: /boot/vmlinuz-4.18.0-16-generic
Found initrd image: /boot/initrd.img-4.18.0-16-generic
Found linux image: /boot/vmlinuz-4.18.0-15-generic
Found initrd image: /boot/initrd.img-4.18.0-15-generic
Found Windows Boot Manager on /dev/sda2@/EFI/Microsoft/Boot/bootmgfw.efi
Adding boot menu entry for EFI firmware configuration
done
update-rc.d: warning: start and stop actions are no longer supported; falling back to defaults
Processing triggers for systemd (239-7ubuntu10.8) ...
Processing triggers for initramfs-tools (0.131ubuntu15.1) ...
update-initramfs: Generating /boot/initrd.img-4.18.0-16-generic
And then restarted my computer. The following images appear:
First thing that appears

Second image

Note that this machine is dual booted with Windows 10.
After adding selinux=0 in the grub menu, I was able to gain back my PC running.
What am I missing here? What should I do? Should I uninstall SELinux or manage it to work properly?
dual-boot login-screen 18.10 selinux
dual-boot login-screen 18.10 selinux
edited 2 days ago
Prabesh Bhattarai
asked Mar 9 at 8:51
Prabesh BhattaraiPrabesh Bhattarai
927
927
You try to boot a Live environment and get rid ofselinuxagain. You also could try to addselinux=0to the kernel append in GRUB and then boot.
– Thomas
Mar 9 at 9:38
1
You might want to try to addselinux=0first. Please see askubuntu.com/questions/19486/… for how to do that.
– Thomas
Mar 9 at 10:02
1
Yes, remove that from GRUB.
– Thomas
2 days ago
1
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
1
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago
|
show 6 more comments
You try to boot a Live environment and get rid ofselinuxagain. You also could try to addselinux=0to the kernel append in GRUB and then boot.
– Thomas
Mar 9 at 9:38
1
You might want to try to addselinux=0first. Please see askubuntu.com/questions/19486/… for how to do that.
– Thomas
Mar 9 at 10:02
1
Yes, remove that from GRUB.
– Thomas
2 days ago
1
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
1
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago
You try to boot a Live environment and get rid of
selinux again. You also could try to add selinux=0 to the kernel append in GRUB and then boot.– Thomas
Mar 9 at 9:38
You try to boot a Live environment and get rid of
selinux again. You also could try to add selinux=0 to the kernel append in GRUB and then boot.– Thomas
Mar 9 at 9:38
1
1
You might want to try to add
selinux=0 first. Please see askubuntu.com/questions/19486/… for how to do that.– Thomas
Mar 9 at 10:02
You might want to try to add
selinux=0 first. Please see askubuntu.com/questions/19486/… for how to do that.– Thomas
Mar 9 at 10:02
1
1
Yes, remove that from GRUB.
– Thomas
2 days ago
Yes, remove that from GRUB.
– Thomas
2 days ago
1
1
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
1
1
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago
|
show 6 more comments
1 Answer
1
active
oldest
votes
SELinux is not fully supported in Ubuntu as they focus on apparmor and as already said by other people, it will probably require to adjust the policy.
But if you want to give it a try, you need to install an actual policy, here I see that you installed selinux-policy-dummy which is described as:
Empty Security-Enhanced Linux policy (dummy package)
This package is used to satisfy package dependencies, but does not
contain an actual SELinux policy. This package should be installed
if the system administrator is developing a custom SELinux policy.
You probably want to install selinux-policy-default instead, this package contains an actual policy, the system should boot a bit further. You also might want to check in /etc/selinux/config that the mode is set to permissive, that will make SELinux only log denials.
Edit: Also, try to install selinux-basic instead of selinuxpackage, the later is ubuntu specific and not maintained for years
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "89"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1124238%2fafter-installing-selinux-i-was-locked-out-of-ubuntu-18-10-log-in-screen-never%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
SELinux is not fully supported in Ubuntu as they focus on apparmor and as already said by other people, it will probably require to adjust the policy.
But if you want to give it a try, you need to install an actual policy, here I see that you installed selinux-policy-dummy which is described as:
Empty Security-Enhanced Linux policy (dummy package)
This package is used to satisfy package dependencies, but does not
contain an actual SELinux policy. This package should be installed
if the system administrator is developing a custom SELinux policy.
You probably want to install selinux-policy-default instead, this package contains an actual policy, the system should boot a bit further. You also might want to check in /etc/selinux/config that the mode is set to permissive, that will make SELinux only log denials.
Edit: Also, try to install selinux-basic instead of selinuxpackage, the later is ubuntu specific and not maintained for years
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
SELinux is not fully supported in Ubuntu as they focus on apparmor and as already said by other people, it will probably require to adjust the policy.
But if you want to give it a try, you need to install an actual policy, here I see that you installed selinux-policy-dummy which is described as:
Empty Security-Enhanced Linux policy (dummy package)
This package is used to satisfy package dependencies, but does not
contain an actual SELinux policy. This package should be installed
if the system administrator is developing a custom SELinux policy.
You probably want to install selinux-policy-default instead, this package contains an actual policy, the system should boot a bit further. You also might want to check in /etc/selinux/config that the mode is set to permissive, that will make SELinux only log denials.
Edit: Also, try to install selinux-basic instead of selinuxpackage, the later is ubuntu specific and not maintained for years
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
SELinux is not fully supported in Ubuntu as they focus on apparmor and as already said by other people, it will probably require to adjust the policy.
But if you want to give it a try, you need to install an actual policy, here I see that you installed selinux-policy-dummy which is described as:
Empty Security-Enhanced Linux policy (dummy package)
This package is used to satisfy package dependencies, but does not
contain an actual SELinux policy. This package should be installed
if the system administrator is developing a custom SELinux policy.
You probably want to install selinux-policy-default instead, this package contains an actual policy, the system should boot a bit further. You also might want to check in /etc/selinux/config that the mode is set to permissive, that will make SELinux only log denials.
Edit: Also, try to install selinux-basic instead of selinuxpackage, the later is ubuntu specific and not maintained for years
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
SELinux is not fully supported in Ubuntu as they focus on apparmor and as already said by other people, it will probably require to adjust the policy.
But if you want to give it a try, you need to install an actual policy, here I see that you installed selinux-policy-dummy which is described as:
Empty Security-Enhanced Linux policy (dummy package)
This package is used to satisfy package dependencies, but does not
contain an actual SELinux policy. This package should be installed
if the system administrator is developing a custom SELinux policy.
You probably want to install selinux-policy-default instead, this package contains an actual policy, the system should boot a bit further. You also might want to check in /etc/selinux/config that the mode is set to permissive, that will make SELinux only log denials.
Edit: Also, try to install selinux-basic instead of selinuxpackage, the later is ubuntu specific and not maintained for years
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited 2 days ago
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered 2 days ago
BigonBigon
1012
1012
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Bigon is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Ask Ubuntu!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1124238%2fafter-installing-selinux-i-was-locked-out-of-ubuntu-18-10-log-in-screen-never%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You try to boot a Live environment and get rid of
selinuxagain. You also could try to addselinux=0to the kernel append in GRUB and then boot.– Thomas
Mar 9 at 9:38
1
You might want to try to add
selinux=0first. Please see askubuntu.com/questions/19486/… for how to do that.– Thomas
Mar 9 at 10:02
1
Yes, remove that from GRUB.
– Thomas
2 days ago
1
Yes you need to disable SELinux entirely. By default it blocks everything, so if you removed the policy without disabling it NOTHING will be allowed by the kernel
– Bigon
2 days ago
1
Don't be disappointed by SELinux. It is a good thing but needs extra work to configure it correctly.
– Thomas
2 days ago