search for: file_context

...w2 throwaway.qcow2 > > > /mnt/knp1-vm-otp02/knp1-vm- otp02.vmdk > > I missed out the -b flag: > > qemu-img create -f qcow2 throwaway.qcow2 -b /mnt/knp1-vm-otp02/knp1- > vm-otp02.vmdk > > anyway ... > > > setfiles: /sysroot/etc/selinux/targeted/contexts/files/file_contexts: Multiple > same specifications for /.*. > > /sysroot/etc/selinux/targeted/contexts/files/file_contexts: Invalid > > argument > > guestfsd: error: Can't stat exclude path "/sysroot/selinux", No such file or > directory - ignoring. > > setfiles: /sysroot/...

On 01/13/2014 04:50 PM, Michal Privoznik wrote: > On 13.01.2014 16:10, Ivan Gooten wrote: >> hi, >> >> recently i've been busy with libvirt(d) v1.2.0 on armhf and i see, even >> if selinux sec driver is enabled on the configure stage, the driver is >> not finally created. these configure parameters are: >> >> --with-selinux >>

...M +0000, Зиновик Игорь Анатольевич > wrote: > > Hello. > > > > I'm trying to convert VMware based virtual machines (CentOS 7.2) and output > them into oVirt. > > virt-v2v fails with following error: > > setfiles: /sysroot/etc/selinux/targeted/contexts/files/file_contexts: Multiple > same specifications for /.*. > > > > File `file_contexts' looks same like in recent CentOS 7.4. My > > conversion server is Fedora 28 (Rawhide), since it contains virt-v2v 1.38. > > This has got to be a bug of some kind in the SELinux ‘setfiles’ > prog...

.../var/www/html/ In april I did chcon -R -t public_content_rw_t /var/www/html/ setsebool -P allow_smbd_anon_write 1 setsebool -P allow_httpd_anon_write 1 echo "/var/www/html/ -- unconfined_u:object_r:public_content_rw_t:s0" >> /etc/selinux/targeted/contexts/files/file_contexts After the latest round of updates (including selinux-policy.noarch 0:3.7.19-260.el6_6.1 and selinux-policy-targeted.noarch 0:3.7.19-260.el6_6.1) samba-access to /var/www/html was denied. Applying the commands above re-enabled samba-access. Anyone knows how I can configure selinux to remeber this...

Instead of just documenting this bug, fix it in the file_contexts file. Replaces commit ad3c8fe7f49c4991e1aa536856a1a408f55d5409. --- customize/SELinux_relabel.ml | 19 +++++++++++++++++++ v2v/virt-v2v.pod | 11 ----------- 2 files changed, 19 insertions(+), 11 deletions(-) diff --git a/customize/SELinux_relabel.ml b/customize/SELinux_relabel.ml i...

[This email is either empty or too large to be displayed at this time]

v1 -> v2: Match more specifically. Rich.

On Monday, 6 March 2017 11:43:14 CET Richard W.M. Jones wrote: > Instead of just documenting this bug, fix it in the file_contexts > file. > > Replaces commit ad3c8fe7f49c4991e1aa536856a1a408f55d5409. > --- > customize/SELinux_relabel.ml | 19 +++++++++++++++++++ > v2v/virt-v2v.pod | 11 ----------- > 2 files changed, 19 insertions(+), 11 deletions(-) > > diff --git a/customize/SELinu...

Instead of just documenting this bug, fix it in the file_contexts file. Replaces commit ad3c8fe7f49c4991e1aa536856a1a408f55d5409. --- customize/SELinux_relabel.ml | 20 ++++++++++++++++++++ v2v/virt-v2v.pod | 11 ----------- 2 files changed, 20 insertions(+), 11 deletions(-) diff --git a/customize/SELinux_relabel.ml b/customize/SELinux_relabel.ml...

On Wed, Dec 17, 2014 at 11:07:06AM +0100, Patrick Bervoets wrote: > echo "/var/www/html/ -- unconfined_u:object_r:public_content_rw_t:s0" >> /etc/selinux/targeted/contexts/files/file_contexts Next time try putting the local policy into: /etc/selinux/targeted/contexts/files/file_contexts.local ... which isn't overwritten by package updates. This is what would have happened if you had used the 'semanage fcontext' command. -- Jonathan Billings <billings at negate.org&gt...

...be when checking matchpathcon: The thing is, because the service is started as unconfined_u, any databases/tables that are created are going to inherit that, and puppet is going to be resetting them. For some more detail, I''ve written something which will set the mysqld_db_t selinux file_context on my data directories which are in /home, and I have a notify which will go and check and re-set the selinux file_context if there are any changes in these directories. They''re set to recurse, so to stop Puppet changing things from unconfined_u to system_u on a regular basis, and sen...

...ications for /.*. > > > > On Tue, Mar 06, 2018 at 09:31:33AM +0000, Зиновик Игорь Анатольевич > > wrote: > > > > Multiple same specifications for /.*. > > ... > > > > > setfiles: > > > > > /sysroot/etc/selinux/targeted/contexts/files/file_contexts: > > > > > Multiple > > > > same specifications for /.*. > > > > My idea for reproducing this was: > > > > (1) Download your file_contexts file. > > > > (2) virt-builder fedora-27 \ > > --upload file_contexts:/etc/selinux...

...I did > chcon -R -t public_content_rw_t /var/www/html/ > setsebool -P allow_smbd_anon_write 1 > setsebool -P allow_httpd_anon_write 1 > echo "/var/www/html/ -- unconfined_u:object_r:public_content_rw_t:s0" >> > /etc/selinux/targeted/contexts/files/file_contexts > > After the latest round of updates (including selinux-policy.noarch > 0:3.7.19-260.el6_6.1 and selinux-policy-targeted.noarch 0:3.7.19-260.el6_6.1) > samba-access to /var/www/html was denied. > Applying the commands above re-enabled samba-access. > > Anyone knows how I can...

...did > chcon -R -t public_content_rw_t /var/www/html/ > setsebool -P allow_smbd_anon_write 1 > setsebool -P allow_httpd_anon_write 1 > echo "/var/www/html/ -- > unconfined_u:object_r:public_content_rw_t:s0" >> > /etc/selinux/targeted/contexts/files/file_contexts > This is incorrect. # semanage fcontext -a -t public_content_rw_t '/var/www/html(/.*?)' # restorecon -R -v /var/www/html Should change the label and it should survive relabel. After the latest round of updates (including selinux-policy.noarch 0:3.7.19-260.el6_6.1 and selinux-policy...

Hi. Do anyone know of some place to put custom SELinux file context specifications? I would prefer not to append lines to /etc/selinux/targeted/contexts/files/file_contexts but rather put one or more similar files somewhere. A file_contexts.d firectory would be nice, but it isn't available. Just creating your own file_contexts.local file does not work, I already tried. I'm running CentOS 5.1 Regards Ingemar

On Tuesday 27 May 2014 09:08:27 Richard W.M. Jones wrote: > On Mon, May 26, 2014 at 11:21:59AM +0200, Pino Toscano wrote: > > Rewrite the relabel API to read the policy configured in the guest, > > invoking setfiles (added as part of the appliance, as part of > > policycoreutils) to relabel the specified root. In case of failure > > at > > any point of the process,

[This email is either empty or too large to be displayed at this time]

...): > > > > qemu-img create -f qcow2 throwaway.qcow2 /mnt/knp1-vm-otp02/knp1-vm- > > otp02.vmdk I missed out the -b flag: qemu-img create -f qcow2 throwaway.qcow2 -b /mnt/knp1-vm-otp02/knp1-vm-otp02.vmdk anyway ... > setfiles: /sysroot/etc/selinux/targeted/contexts/files/file_contexts: Multiple same specifications for /.*. > /sysroot/etc/selinux/targeted/contexts/files/file_contexts: Invalid argument > guestfsd: error: Can't stat exclude path "/sysroot/selinux", No such file or directory - ignoring. > setfiles: /sysroot/etc/selinux/targeted/contexts/files...

...original email, it was hanging at running >> setfiles: >> >> commandrvf: stdout=n stderr=y flags=0x0 >> commandrvf: setfiles -F -e /sysroot/dev -e /sysroot/proc -e >> /sysroot/selinux -e /sysroot/sys -r /sysroot -q >> /sysroot/etc/selinux/targeted/contexts/files/file_contexts /sysroot/ >> Can't stat exclude path "/sysroot/selinux", No such file or directory >> - ignoring. > > OK that's interesting. setfiles is doing SELinux labelling of the > filesystem. The time taken should be approximately proportional to > the number of f...

...it was doing for those hours. Well, as I said in my original email, it was hanging at running setfiles: commandrvf: stdout=n stderr=y flags=0x0 commandrvf: setfiles -F -e /sysroot/dev -e /sysroot/proc -e /sysroot/selinux -e /sysroot/sys -r /sysroot -q /sysroot/etc/selinux/targeted/contexts/files/file_contexts /sysroot/ Can't stat exclude path "/sysroot/selinux", No such file or directory - ignoring. There's no timestamp in the output or logs so it's hard to tell exactly what happens when or how long each step takes. For example, I wouldn't know how long the setfiles step tak...