search for: setenforce

When does echo 0 > /selinux/inforce need to be used? I.e., where is selinux enforcing itself on the system to protect it? When I do yum install of some package, it seems to work (not being blocked). When would doing something not work because selinux is watching it (or whatever that process is doing)? Thanks, -wes

...mls - Multi Level Security protection. SELINUXTYPE=targeted And when I check if it's enabled this is what I get: [root at beta-new:~] #getenforce Disabled But when I go to set SELinux to enabled, even with the config file set as you see it above, I get this result: [root at beta-new:~] #setenforce 1 setenforce: SELinux is disabled And nothing I can do enables it on this host. So how, can I solve this problem? I would definitely appreciate any advice you may have. Thanks Tim -- GPG me!! gpg --keyserver pool.sks-keyservers.net --recv-keys F186197B

postfixadmin setup.php is claiming: *Error: Smarty template compile directory templates_c is not writable.* *Please make it writable.* *If you are using SELinux or AppArmor, you might need to adjust their setup to allow write access.* This goes away with 'setenforce 0', so it is an SELinux issue. I have tried both: restorecon -Rv /usr/share/postfixadmin and chcon -R -t httpd_sys_content_t /usr/share/postfixadmin and they are not the problem. Googling this message doe snot produce any SELinux advice. Any ideas? thanks

...ng: >> >> *Error: Smarty template compile directory templates_c is not writable.* >> *Please make it writable.* >> *If you are using SELinux or AppArmor, you might need to adjust their >> setup to allow write access.* >> >> >> This goes away with 'setenforce 0', so it is an SELinux issue. I have >> tried both: >> >> restorecon -Rv /usr/share/postfixadmin >> >> and >> >> chcon -R -t httpd_sys_content_t /usr/share/postfixadmin >> >> and they are not the problem. Googling this message doe snot pr...

Hi folks, I've been googling for an hour on this which seems to be awfully basic. But I cannot find anything definitive. [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: Access denied [root at centos-gig ~]# setenforce 0 [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: No such file or directory Have tried things like : chcon -t samba_share_t /home/amckay Also took the output from: getsebool -a | grep samba and set all them to "on" Stripped my config down to the most...

TODO: Fix selinux :P --- Makefile.am | 1 + ovirt-node.spec.in | 3 ++ scripts/ovirt | 3 ++ scripts/ovirt-managed-rsyslog | 72 +++++++++++++++++++++++++++++++++++++++++ 4 files changed, 79 insertions(+), 0 deletions(-) create mode 100755 scripts/ovirt-managed-rsyslog diff --git a/Makefile.am b/Makefile.am index 0374f07..5201a79 100644

...ut I have heard nothing. I am > > > *thinking* it is a SELINUX problem, but I cannot figure out what. > > > > > > > If you suspect SELinux is to blame, have you tried putting SELinux into > > permissive mode to see that resolves the issues? > > > > setenforce 0 (re-enable with setenforce 1) > > I guess I can try that. > > > > > If everything works with SELinux in permissive mode, then you'll need to > > create a policy for it *[0]*. > > That would imply that somehow the policies on my laptop are *different* than...

Le mardi 25 avril 2017 ? 10:39 +0200, Robert Moskowitz a ?crit : > Thanks Laurent. You obviously know a LOT more about SELinux than I. I > pretty much just use commands and not build policies. So I need some > more information here. > > From what you provided below, how do I determine what is currently in > place and how do I add your stuff (changing postgresql with

If I make a change to /etc/sysconfig/selinux do I have to restart anything for the change to take effect?

...ting the following on my new mailserver: Apr 7 10:17:27 z9m9z dovecot: dict: Error: mysql(localhost): Connect failed to database (postfix): Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13) - waiting for 25 seconds before retry They go away when I setenforce 0. So I googled dovecot mysql selinux and the only worthwhile hit was: http://zszsit.blogspot.com/2012/12/dovecot-mysql-selinux-issue-on-centos6.html that provides a /etc/selinux/dovecot2mysql.te Is there a simpler way like a setsbool option? With all the howtos on dovecot with mysql, it is in...

Hi folks, I've been googling for an hour on this which seems to be awfully basic. But I cannot find anything definitive. [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: Access denied [root at centos-gig ~]# setenforce 0 [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: No such file or directory Have tried things like : chcon -t samba_share_t /home/amckay Also took the output from: getsebool -a | grep samba and set all them to "on" Stripped my config down to the most...

On 03/18/2019 09:32 PM, Gordon Messmer wrote: > On 3/18/19 6:05 PM, H wrote: >> Thank you, visited that page and tried the above but get the following messages: >> >> No protocol specified >> Geany: cannot open display > > > Can you copy the text of the command you ran and its output from your terminal, and paste that in a reply email? > > Also, run the

..._profile/.bash_history/.bashrc/ hide unreadable = yes template shell = /bin/sh template homedir = /home/%U # name resolve order = lmhosts wins bcast host [test] path = /home/jason/Desktop/photo read only = no browseable = yes I had a problem with SElinux that solved by enter below commands : setenforce 0 chcon -t samba_share_t -R /path/to/share setenforce 1 The problem solved but I can't change or add permission to directory via Windows as "Setup share permissions" section.I use "jason" account that is exist in administrator group but Jason can't too. How can I sol...

...tdrop_t var_lib_t:file write; allow system_mail_t rpm_t:tcp_socket { read write }; allow system_mail_t rpm_var_lib_t:file { read write }; allow system_mail_t var_lib_t:file write; I've been getting the latter set continously since the upgrade. The first set appeared briefly when I did a 'setenforce 0' to diagnose a spamc_t issue with calling the /usr/sbin/sendmail symlink.. They correspond to audit.log messages similar to the following: type=AVC msg=audit(1239664501.977:9052044): avc: denied { write } for pid=18901 comm="sendmail" name="transaction-done.2009-04-12.22:5...

I have two computers: both running CentOS 6.7, 64-bit, with kernel 2.6.32-573.12.1.el6.x86_64. One is a laptop with an 2 core Intel processor and the other is a desktop machine with a 4 core AMD processor. Both with selinux enabled. I have a USB serial port device (a RR-CirKits LCC-Buffer USB). On the desktop I am getting this error: sauron.deepsoft.com% sudo minicom Device /dev/ttyACM0

On Tue, December 30, 2014 03:18, Digimer wrote: > What possible reason could they have for that? > > On 30/12/14 02:17 AM, Laurent Dumont wrote: >> By any change, is it a VPS? I know that my CloudAtCost (very cheap but >> extremely unreliable provider) prevents you from using SeLinux on their >> Centos image. No mysterious breakages == lower support costs. The same

...you don't have it installed policycoreutils-python provides the audit2allow and audit2why binaries which can help you generate a policy to avoid this denial if you want. Also, I often find that to truly diagnose the issue, I need to run the following: # semodule --disable_dontaudit --build # setenforce permissive # tail -f /var/log/audit/audit.log | grep denied | tee ~/denials.out ... then reproduce the problem, and kill the tail. The resulting denials.out file will have a lot of unrelated denials, but if you run audit2allow against the entire file, you'll be able to determine which ones ar...

I'm seeing this in /var/log/messages: Oct 7 20:46:25 centos dbus: Can't send to audit system: USER_AVC avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?) Some googling suggested this was due to a policy issue a year ago, but I'm seeing it with selinux-policy-targeted-2.4.6-30.el5. I've got a game server program (Enemy Territory Quake Wars 1.1) that fails...

...te shell = /bin/sh >template homedir = /home/%U ># >name resolve order = lmhosts wins bcast host > >[test] >path = /home/jason/Desktop/photo >read only = no >browseable = yes > > > >I had a problem with SElinux that solved by enter below commands : > > >setenforce 0 > >chcon -t samba_share_t -R /path/to/share >setenforce 1 > > >The problem solved but I can't change or add permission to directory >via Windows as "Setup share permissions" section.I use "jason" account >that is exist in administrator group but Jas...

Hey all, I'm having some trouble getting PHP5 w/ CentOS 5 to connect to a remote MySQL server using the standard mysql_connect() call. Yes, MySQL libraries are installed along with php-mysql... The only way I can get it to work is to run setenforce Permissive, otherwise the connection fails. The annoying thing is that nothing at all shows up in my /var/log/messages file describing why SELinux is stopping this connection. If I run my script with the CLI php binary, it connects to the remote server fine, just not when executed via httpd. I t...