selinux login loop (custom init) [Solved]

[Cheesyjuggler64]

I've been trying to get selinux working with dinit, the system boots fine when selinux is disabled however when I enable it even when it is in permissive mode the system just keeps sending me to the login screen i.e when I enter the correct credentials the screen just sends me back to input credentials (I'am logging in as the root user). To get selinux to work it needs to mounted otherwise it will just show up as disabled so I added this line to my init, it is set to run right after /sys is mounted.

Code: Select all

mount -t selinuxfs selinuxfs /sys/fs/selinux

when this line is added I get the login problem however when I remove it the system and run it after I've logged in it just seems to work. I believe that this is a problem to do with labeling and such but surely since its set to permissive it should just log the issues?
My selinux config is permissive and strict.
Help appreciated

[Cheesyjuggler64]

so I somehwat fixed it when i ran sestatus after rebooting I noticed there was this line

Code: Select all

Policy deny_uknown status: denied

when I changed this to allowed by adding handle-unknown = allow in my /etc/selinux/semanage.conf and then rebuilt the policy with

Code: Select all

semodule -B

it works howvwer now everytime it reboots it runs semodule -B is there anyway to make the change persistent?