search for: sestatus

Hi Rowland, No I am running samba as a member, purely using it for ntlm_auth for freeradius. If i run it manually i.e. /usr/local/samba/sbin/winbindd -D it starts up and stays up no issues. Yes selinx is disabled sestatus SELinux status: disabled Any pointers...? Many Thanks Arnab On Thu, Nov 23, 2017 at 8:34 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Thu, 23 Nov 2017 20:21:15 +0000 > Arnab Roy via samba <samba at lists.samba.org> wrote: > > > T...

...support at harte-lyne.ca from the command line on both hosts. The permissions of the files in /var/spool/cron are: # ll /var/spool/cron total 12 -rw-------. 1 root root 34 Mar 9 16:41 root -rw-------. 1 root root 4245 Mar 12 14:53 theheart Selinux is set to Permissive (for the time being): # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 24 Policy from config file: targeted What is causing cron to complain. What is unsafe and ho...

> > Check /var/log/secure for why the directory is not able to be created. > Might be selinux, is that enabled? (sestatus) Good catch! It was indeed SELinux preventing the directory from being created. Disabling it allows that to happen. For instance I just created a new test user in LDAP: #ssh odunphy at ops2.example.com odunphy at ops2.example.com's password: Creating directory '/home/odunphy'....

...so /usr/lib/libtonezone.so.1.0 if [ -z "" -a `id -u` = 0 ]; then \ /sbin/ldconfig || : ;\ fi rm -f /usr/liblibtonezone.so /bin/ln -sf libtonezone.so.1.0 \ /usr/lib/libtonezone.so.1 /bin/ln -sf libtonezone.so.1.0 \ /usr/lib/libtonezone.so if [ -z "" && -x /usr/sbin/sestatus ] && (/usr/sbin/sestatus | grep "SELinux status:" | grep -q "enabled") ; then restorecon -v /usr/lib/libtonezone.so; fi /bin/sh: line 0: [: saknar "]" /usr/bin/install -c -D -m 644 zaptel.h /usr/include/zaptel/zaptel.h /usr/bin/install -c -D -m 644 tonezone.h /...

Hiya all, After some problems the other day, I've tracked down a problem I've been having fairly definitely to selinux being on in permissive mode. sestatus shows it enabled and permissive. Is there a way to change from permissive to disabled without rebooting? (have changed config to disabled in /etc/selinux/config, but would rather not reboot atm). setenforce 0 keeps it in this same mode as I belive thats just for enforcing mode only anyway. Have t...

....4.21.2. I did the following after: cd /usr/src/libpri/ make make clean make install Install end with these lines.....: *ln -sf libpri.so.1.4 libpri.so* *mkdir -p /usr/lib* *mkdir -p /usr/include* *install -m 644 libpri.h /usr/include* *install -m 755 libpri.so.1.4 /usr/lib* *#if [ -x /usr/sbin/sestatus ] && ( /usr/sbin/sestatus | grep "SELinux status:" | grep -q "enabled"); then /sbin/restorecon -v /usr/lib/libpri.so.1.4; fi* *( cd /usr/lib ; ln -sf libpri.so.1.4 libpri.so)* *install -m 644 libpri.a /usr/lib* *if test $(id -u) = 0; then /sbin/ldconfig -n /usr/lib; fi*...

.../misc/wcfxs.o install -D -m 755 libtonezone.so /usr/lib/libtonezone.so.1.0 [ `id -u` = 0 ] && /sbin/ldconfig || : rm -f /usr/lib/libtonezone.so ln -sf libtonezone.so.1.0 \ /usr/lib/libtonezone.so.1 ln -sf libtonezone.so.1.0 \ /usr/lib/libtonezone.so if [ -x /usr/sbin/sestatus ] && (/usr/sbin/sestatus | grep "SELinux status:" | grep -q "enabled") ; then /sbin/restorecon -v /usr/lib/libtonezone.so; fi install -D -m 644 zaptel.h /usr/include/linux/zaptel.h install -D -m 644 torisa.h /usr/include/linux/torisa.h install -D -m 644 tonezone.h /us...

SELinux appears to be interfering with winbind's functionality. I have the lastest policy package installed: selinux-policy-targeted-1.17.30-2.149 which allegedly solves this problem according to the RedHat knowledge base, but clearly does not. I have to turn off SELinux by using setenforce 0 (permissive) to get winbind to work at all, and based on what I see in the log files,

...[0-9]' glob finding logs to compress failed destination /srv/www2/logs/viewer.log-20140409 already exists, skipping rotation According to this kb from redhat's website: https://access.redhat.com/site/solutions/39006 problem could be selinux. But SElinux is disabled: [root at www02 ~]# sestatus SELinux status: disabled [root at www02 ~]# Any idea?? Could be a bug?? Host is a CentOS 6.5 x86_64 fully patched. Thanks.

...ypes -g -o q931.lo -c q931.c cc -shared -Wl,-soname,libpri.so.1 -o libpri.so.1.0 pri.lo q921.lo prisched.lo q931.lo /sbin/ldconfig -n . ln -sf libpri.so.1 libpri.so mkdir -p /usr/lib mkdir -p /usr/include install -m 644 libpri.h /usr/include install -m 755 libpri.so.1.0 /usr/lib if [ -x /usr/sbin/sestatus ] && ( /usr/sbin/sestatus | grep "SELinux status:" | grep -q "enabled"); then restorecon -v //lib/libpri.so.1.0; fi ( cd /usr/lib ; ln -sf libpri.so.1 libpri.so ) install -m 644 libpri.a /usr/lib /sbin/ldconfig [root@LinuxLab libpri]#

Having problems starting httpd & portmapper #service httpd start /usr/sbin/httpd: error while loading shared libraries: libm.so.6: cannot open shared object file: No such file or directory and I traced it to selinux, which I had just turned on for the first time: # sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: enforcing Mode from config file: enforcing Policy version: 21 Policy from config file: targeted I can #setsebool -P httpd_disable_trans on and httpd st...

...so tried to use the "mailtrain" backend but Dovecot doesn't accept it ( I suppose I need to set "antispam_backend" to "mailtrain" but this doesn't works ). > > Do you have SELinux active? http://wiki2.dovecot.org/WhyDoesItNotWork > near the end. sestatus doesn't exists, package not installed ( policycoreutils ) and no file /var/log/audit* So I suppose iRedMail doesn't install SELinux components. > > If this does not help, add a wrapper script in your config and check > if the script is called at least > It's not called...

On 07/20/2017 02:20 PM, yayo (j) wrote: > Hi, > > Thank you for the answer and sorry for delay: > > 2017-07-19 16:55 GMT+02:00 Ravishankar N <ravishankar at redhat.com > <mailto:ravishankar at redhat.com>>: > > 1. What does the glustershd.log say on all 3 nodes when you run > the command? Does it complain anything about these files? > > >

...2656c65645f743a733000* *trusted.bit-rot.version=0x050000000000000059662c390006b836* *trusted.gfid=0x9ef88647cfe64a35a38ca5173c9e8fc0* hum.... Is selinux the problem? but on node04 was disabled (AFTER GLUSTER JOIN, I hope to remember) ... You think I needs to relabel? how? *[root at node01 ~]# sestatus* *SELinux status: disabled* *[root at node02 ~]# sestatus* *SELinux status: disabled* *[root at node04 ~]# sestatus* *SELinux status: disabled* Thank you > Thanks, > Ravi > > > > >> 2. Are these 12 files also present in...

...isn?t contributing to this issue. apparmor: I tried the following commands to see if apparmor was enabled: cat /sys/module/apparmor/parameters/enabled sudo apparmor_status Neither returned a result. Selinux: I tried the following commands to see if selinux was enabled: sudo getenforce sudo sestatus Neither returned a result. Therefore, I suspect that apparmor and selinux are not installed/enabled. Best Regards, Unraidster

I sure did check the firewall and selinux as well. As an extreme testing major, they are both turned off. $ systemctl status firewalld firewalld.service - firewalld - dynamic firewall daemon ? ?Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled) ? ?Active: inactive (dead) sestatus? SELinux status: ? ? ? ? ? ? ? ? disabled Actually, now tftp transfers are denied $ tftp 127.0.0.1 tftp> get test Error code 0: Permission denied How can I monitor in real time, or check logs of tftp service and socket and xinetd? On 28 June 2014 14:20, Michael D. Setzer II <mikes at kuent...

> > You may also need to restart sssd or nslcd, depending upon which one is > running the backed ldap connection service on the clients. Hmm.. I got a different result after restarting nclcd. Instead of logging me in and just complaining that it couldn't create the home directory, it still complains about not creating the home directory, but now it doesn't let me in: #ssh

I am trying to setup dovecot on a FC4 machine. Access to the machine is provided through pam. When I login to the machine my home directory is mounted over nfs from a central file server. I have dovecot installed and running but it can't seem to access my home directory. When I try and access my mail I get the following three lines in /var/log/maillog: > Jul 25 12:46:04 escher imap-login:

...armor: I tried the following commands to see if apparmor was > enabled: cat /sys/module/apparmor/parameters/enabled > sudo apparmor_status > > Neither returned a result. > > Selinux: I tried the following commands to see if selinux was enabled: > sudo getenforce > sudo sestatus > > Neither returned a result. > > Therefore, I suspect that apparmor and selinux are not > installed/enabled. > > Best Regards, > Unraidster > Sorry to be so long in replying to this, but life got in the way. You initially had an incorrect smb.conf and you changed...

Hi folks, normally I have not so much to do with SElinux but I expected to get in touch sooner or later :-) I migrated a backup-system from El5 to EL6 and the rsync backup process is complaining about selinux attr's now. client <-> server (fetches via rsync -aHAX) client# sestatus SELinux status: disabled server# sestatus SELinux status: enabled SELinuxfs mount: /selinux Current mode: permissive Mode from config file: permissive Policy version: 24 Policy from config file: targ...