Hey guys, For some reason I can't seem to enable SELinux on this one host. Here's my SELinux config file: [root at beta-new:~] #cat /etc/sysconfig/selinux # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - No SELinux policy is loaded. SELINUX=enforcing # SELINUXTYPE= can take one of these two values: # targeted - Targeted processes are protected, # mls - Multi Level Security protection. SELINUXTYPE=targeted And when I check if it's enabled this is what I get: [root at beta-new:~] #getenforce Disabled But when I go to set SELinux to enabled, even with the config file set as you see it above, I get this result: [root at beta-new:~] #setenforce 1 setenforce: SELinux is disabled And nothing I can do enables it on this host. So how, can I solve this problem? I would definitely appreciate any advice you may have. Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B
On 29/12/14 09:58 PM, Tim Dunphy wrote:> Hey guys, > > For some reason I can't seem to enable SELinux on this one host. > > Here's my SELinux config file: > > [root at beta-new:~] #cat /etc/sysconfig/selinux > > # This file controls the state of SELinux on the system. > # SELINUX= can take one of these three values: > # enforcing - SELinux security policy is enforced. > # permissive - SELinux prints warnings instead of enforcing. > # disabled - No SELinux policy is loaded. > SELINUX=enforcing > # SELINUXTYPE= can take one of these two values: > # targeted - Targeted processes are protected, > # mls - Multi Level Security protection. > SELINUXTYPE=targeted > > > And when I check if it's enabled this is what I get: > > [root at beta-new:~] #getenforce > Disabled > > But when I go to set SELinux to enabled, even with the config file set as > you see it above, I get this result: > > [root at beta-new:~] #setenforce 1 > setenforce: SELinux is disabled > > And nothing I can do enables it on this host. So how, can I solve this > problem? I would definitely appreciate any advice you may have. > > Thanks > TimDid you reboot? If it was 'disabled', you need to reboot to re-enable it. You can flip between 'permissive' and 'enforcing' without a reboot, but not to/from, 'disabled' (at least that is how I recall). -- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?
By any change, is it a VPS? I know that my CloudAtCost (very cheap but extremely unreliable provider) prevents you from using SeLinux on their Centos image. On 12/29/2014 9:58 PM, Tim Dunphy wrote:> Hey guys, > > For some reason I can't seem to enable SELinux on this one host. > > Here's my SELinux config file: > > [root at beta-new:~] #cat /etc/sysconfig/selinux > > # This file controls the state of SELinux on the system. > # SELINUX= can take one of these three values: > # enforcing - SELinux security policy is enforced. > # permissive - SELinux prints warnings instead of enforcing. > # disabled - No SELinux policy is loaded. > SELINUX=enforcing > # SELINUXTYPE= can take one of these two values: > # targeted - Targeted processes are protected, > # mls - Multi Level Security protection. > SELINUXTYPE=targeted > > > And when I check if it's enabled this is what I get: > > [root at beta-new:~] #getenforce > Disabled > > But when I go to set SELinux to enabled, even with the config file set as > you see it above, I get this result: > > [root at beta-new:~] #setenforce 1 > setenforce: SELinux is disabled > > And nothing I can do enables it on this host. So how, can I solve this > problem? I would definitely appreciate any advice you may have. > > Thanks > Tim >
What possible reason could they have for that? On 30/12/14 02:17 AM, Laurent Dumont wrote:> By any change, is it a VPS? I know that my CloudAtCost (very cheap but > extremely unreliable provider) prevents you from using SeLinux on their > Centos image. > > On 12/29/2014 9:58 PM, Tim Dunphy wrote: >> Hey guys, >> >> For some reason I can't seem to enable SELinux on this one host. >> >> Here's my SELinux config file: >> >> [root at beta-new:~] #cat /etc/sysconfig/selinux >> >> # This file controls the state of SELinux on the system. >> # SELINUX= can take one of these three values: >> # enforcing - SELinux security policy is enforced. >> # permissive - SELinux prints warnings instead of enforcing. >> # disabled - No SELinux policy is loaded. >> SELINUX=enforcing >> # SELINUXTYPE= can take one of these two values: >> # targeted - Targeted processes are protected, >> # mls - Multi Level Security protection. >> SELINUXTYPE=targeted >> >> >> And when I check if it's enabled this is what I get: >> >> [root at beta-new:~] #getenforce >> Disabled >> >> But when I go to set SELinux to enabled, even with the config file set as >> you see it above, I get this result: >> >> [root at beta-new:~] #setenforce 1 >> setenforce: SELinux is disabled >> >> And nothing I can do enables it on this host. So how, can I solve this >> problem? I would definitely appreciate any advice you may have. >> >> Thanks >> Tim >> > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos-- Digimer Papers and Projects: https://alteeve.ca/w/ What if the cure for cancer is trapped in the mind of a person without access to education?