search for: sellinux

On 3/2/2015 2:34 PM, John R Pierce wrote: > step 1) delete FTPD, and use ssh/scp/rscp instead. errr, I meant, sftp, not rscp -- john r pierce 37N 122W somewhere on the middle of the left coast

...MT+02:00 Tim Dunphy <bluethundr at gmail.com>: > > > > errr, I meant, sftp, not rscp > > > Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow > regular ol' FTP using SELinux? Or does that just defeat the purpose of > having a secure SELlinux server entirely? > FTP is not safe as it does not encrypt username(s) and password(s) or traffic during transfer. RHEL/Centos provides SELinux booleans and settings at least for vsftpd (very secure ftpd). Please use it, if possible. -- Eero

I'm having problems setting up a samba server with sellinux in centos 5.6 (x64). My samba config works flawlessly when selinux is disabled but fails to access shares when selinux is enabled. Wich command makes it possible to run samba with selinux without disabling it, now I've done: "set sebool -P smbd_disable_trans 1" but doesn't reall...

...perl/5.8.5/i386-linux-thread-multi/auto/DBD/Oracle/Oracle.so' for module DBD::Oracle: libclntsh.so.10.1: cannot open shared object file: No such file or directory at /usr/lib/perl5/5.8.5/i386-linux-thread-multi/DynaLoader.pm line 230. ============================================ Also I disabled SELlinux, defined all of the above mentioned env variables in /etc/profile but now use. One weird thing is that as a standalone perl script I can connect to oracle but not through CGI. Can any one please suggest what's going wrong or what am I missing? thanks in advance, Siv -------------- next part -...

...3 PM, Tim Dunphy <bluethundr at gmail.com> wrote: >> >> errr, I meant, sftp, not rscp > > > Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow > regular ol' FTP using SELinux? Or does that just defeat the purpose of > having a secure SELlinux server entirely? What is the context here? The big problem with ftp is that it passes the user credentials in the clear. There is nothing particularly wrong with an anonymous ftp download area where the files are put in place with something more secure - but it is usually easier to use http for...

> > errr, I meant, sftp, not rscp Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow regular ol' FTP using SELinux? Or does that just defeat the purpose of having a secure SELlinux server entirely? Thanks Tim On Mon, Mar 2, 2015 at 5:35 PM, John R Pierce <pierce at hogranch.com> wrote: > On 3/2/2015 2:34 PM, John R Pierce wrote: > >> step 1) delete FTPD, and use ssh/scp/rscp instead. >> > > errr, I meant, sftp, not rscp > > > > &...

...dr at gmail.com>: > >> > >> > errr, I meant, sftp, not rscp >> >> >> Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow >> regular ol' FTP using SELinux? Or does that just defeat the purpose of >> having a secure SELlinux server entirely? >> > > FTP is not safe as it does not encrypt username(s) and password(s) or > traffic during transfer. > > RHEL/Centos provides SELinux booleans and settings at least for vsftpd > (very secure ftpd). Please use it, if possible. > > -- > Eero >

...gmail.com> wrote: > >> > >> errr, I meant, sftp, not rscp > > > > > > Heh.. yeah. But the client isn't gonna go for that. LOL. Any way to allow > > regular ol' FTP using SELinux? Or does that just defeat the purpose of > > having a secure SELlinux server entirely? > > What is the context here? The big problem with ftp is that it passes > the user credentials in the clear. There is nothing particularly wrong > with an anonymous ftp download area where the files are put in place > with something more secure - but it is usually...