Quotas prevent SELinux relabel in Red Hat Enterprise Linux

Solution Verified - Updated -

Issue

Embedded vendor must create a base reference image build for its products. Some of the products support SELinux while some do not, therefore the reference image cannot have SELinux enabled. SELinux must be enabled at a later time.

Because quotas are also enabled and rc.sysint checks/enforces quotas before checking that an SELinux relabel needs to take place, the relabel operation fails because quota enforces cause some files to be immutable.

Environment

Red Hat Enterprise Linux (RHEL) 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In
Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.