search for: default_t

...'m seeing for this file: > . type=AVC msg=audit(1425569361.321:11416): avc: *denied* { getattr } for pid=12404 comm="httpd" path="*/McFrazier/PhpBinaryCql/CqlClient.php*" dev="vda" ino=1966101 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=file type=AVC msg=audit(1425569168.760:11351): avc: denied { read } for pid=12406 comm="httpd" name="*CqlClient.php*" dev="vda" ino=1966101 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:default_t:s0 tclass=file This is the selinux permi...

Hey all, There's a website I help run that uses the Cassandra DB as its database. I notice that if I run the web server in SELinux permissive mode, the site works fine. But if I put it into enforcing mode, the site goes down with this error: Warning: require_once(/McFrazier/PhpBinaryCql/CqlClient.php): failed to open stream: Permission denied in

...s a savefile to capacity (-C option) and tries to open a new one, I get the following AVC denial: kernel: audit(1204485464.409:106): avc: denied { search } for pid=2702 comm="tcpdump" name="/" dev=hdb1 ino=2 scontext=system_u:system_r:netutils_t:s0 t context=system_u:object_r:default_t:s0 tclass=dir Any suggestions as the the proper fix to make this work? The target directory for the savefiles has context system_u:object_r:netutils_tmp_t, and I get no complaints about that directory or its files. I have no idea what tcpdump might be searching for in the root directory or, for...

On Fri, Sep 11, 2020 at 04:49:55PM -0500, Eric Blake wrote: > The next strict knob: allow the user to pass unknown flags across the > wire (this is different than passing a known flag at the wrong time). > > It is interesting to note that NBD only permits 16 bits of flags, but > we have a signature that takes uint32_t; if we wanted, we could pack > libnbd-specific flags in the

...tfattr -d -m . hex /data/brick6/data/08aa5fc4-c9ba-4fcf-af57-72450b875d1a/images getfattr: hex: No such file or directory getfattr: Removing leading '/' from absolute path names # file: data/brick6/data/08aa5fc4-c9ba-4fcf-af57-72450b875d1a/images security.selinux="system_u:object_r:default_t:s0" trusted.afr.VMData2-client-6=0sAAAAAQAAAAAAAAAG trusted.gfid=0sK8ZFxmThRxeq7pYw7QTOCw== trusted.glusterfs.dht=0sAAAAAQAAAABVVVVVqqqqqQ== on Found2 running getfattr -d -m . hex /data/brick6/data/08aa5fc4-c9ba-4fcf-af57-72450b875d1a/images gives: getfattr: hex: No such file or directo...

...it to this file, then re-compile, package # # and update the kernel. # ############################################################################ module local_postfix 1.0; require { type admin_home_t; type bin_t; type default_t; type dovecot_t; type dovecot_deliver_t; type dovecot_deliver_exec_t; type dovecot_var_log_t; type etc_runtime_t; type fs_t; type home_root_t; type httpd_config_t; type httpd_t; type initrc_t; type postfix_etc_t...

your guys: I can't see the direcotry under / produced by mkdir command via Internat Explorer, except the any direcotry and file that exist after the CentOS installation complete. This is my directory 's detail information: drwxr-xr-x root www-data root:object_r:default_t CenterRepo and my httpd's configuration information: <VirtualHost *:80> ServerAdmin gitserver DocumentRoot / <Directory /> Options Indexes FollowSymLinks includes order allow,deny AllowOverride None allow from all </Dire...

> -----Original Message----- > From: Richard W.M. Jones [mailto:rjones@redhat.com] > Sent: Tuesday, March 6, 2018 11:49 AM > To: Зиновик Игорь Анатольевич <ZinovikIA@nspk.ru> > Cc: libguestfs@redhat.com > Subject: Re: [Libguestfs] virt-v2v 1.38 fails to convert .vmx VM: setfiles ... > Multiple same specifications for /.*. > > On Tue, Mar 06, 2018 at 08:40:51AM

https://bugzilla.samba.org/show_bug.cgi?id=5526 Summary: problems with rsync -X --link-dest Product: rsync Version: 3.0.2 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo: wayned@samba.org ReportedBy: idra@samba.org QAContact:

...policy says is right for that path. The point of using equivalence is when you move a default location - such as /home to /data/home or /var/lib/mysql to /data/mysql In that situation the default selinux policy doesn't know anything about /data or the contents of it so it'll end up with a default_t label ... not very useful. Now you could semanage fcontext -a -t mysqldb_db_t /data/mysql(/.*)? but quite often the 'story' of a directory tree isn't about just one label and it'd be tedious trying to match them all ... For the craziness that is $HOME for instance... CentOS7: cat...

I have a centos 6.6 laptop which is having trouble (intermittent boot failures, or more rightly so, multiple failures, intermittent booting). The laptop is running selinux. I pulled the second internal disk out to get my data off of it. I plugged it into my centos 5.x machine and mounted it. I was able to do a dir listing, but whrn I tried to cd into any of the directories, I get a bunch of AVC

Thanks, I managed to fix /var/lib/mysql # ls -ldZ /var/lib/mysql drwxr-xr-x. mysql mysql system_u:object_r:mysqld_db_t:s0 /var/lib/mysql To fix it, I tried: semanage fcontext -d -e /var/lib/mysql this command returned: KeyError: /var/lib/mysql I tried restorecon anyway: restorecon -Rv /var/lib/mysql But not better: ls -ldZ /var/lib/mysql drwxr-xr-x. mysql mysql system_u:object_r:var_lib_t:s0

v1 -> v2: - Add simple test of the setfiles API. - Use SELinux_relabel module in virt-v2v (instead of touch /.autorelabel). - Small fixes. Rich.

....name:/bin/false stat /snapshots/ File: /snapshots/ Size: 60 Blocks: 0 IO Block: 4096 directory Device: ca02h/51714d Inode: 25249202 Links: 4 Access: (0777/drwxrwxrwx) Uid: (11117/SAMDOM\user.name) Gid: (10513/SOMDEV\domain users) Context: unconfined_u:object_r:default_t:s0 Access: 2020-07-23 21:28:52.423473925 +0000 Modify: 2020-07-23 17:30:42.754694526 +0000 Change: 2020-07-23 21:33:26.326257000 +0000 Birth: - ------------------------------------------------------- let me know if there is any other information you might need. Thanks, - isaac stone

https://bugzilla.samba.org/show_bug.cgi?id=6546 Summary: lremovexattr problems Product: rsync Version: 3.0.6 Platform: Other OS/Version: Linux Status: NEW Severity: normal Priority: P3 Component: core AssignedTo: wayned@samba.org ReportedBy: Dave@Yost.com QAContact:

...ve to add a ticket??? My krb5.com looks like this: [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] ticket_lifetime = 24000 default_realm = DOMAIN2003.COM dns_lookup_realm = false dns_lookup_kdc = false default_tkt_enctypes = DES-CBC-MD5 default_tgs_enctypes = DES-CBC-MD5 [realms] DOMAIN2003.COM = { kdc = server2003.domain2003.com:88 admin_server = server2003.domain2003.com:749 default_domain = domain2003.com } [domain_realm] .domain2003.com = DOMAIN2003.COM comain2003.com = DOMAIN2003.COM [...