From: lvrabec@redhat.com (Lukas Vrabec)
Date: Wed, 31 Aug 2016 13:09:47 +0200
Subject: [refpolicy] Enforcing MLS policy and rescue mode
Message-ID: <e8c501bb-67dc-758f-e2ab-ca44fdf2ccc0@redhat.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

Hi,

I'm facing issue on RHEL7 with mls policy and enforcing state. System 
not reacting after booting to rescue mode. Issue here is missing 
transition rule where sulogin_t domain with s15:c0.c1023 trying to 
transition to sysadm_t with s0-s15:c0.c1023. I don't think that we want 
allow this.

On the other hand question is, if enforced MLS policy is supported in 
rescue mode?

Thanks for help.
Lukas.

-- 
Lukas Vrabec
SELinux Solutions
Red Hat, Inc.