similar to: SELinux

Probably a very know problem but I fail to find a solution. selinux enforced makes the /etc/init.d/dovecot start command fail If I change it to permiscious mode then it works. Any idea how to solve this? I use FC5 with dovecot-1.0-0.beta2.7 Thanks, Alfred

Hi, I want to build an RPM package which contains an custom SELinux policy for the daemon. I know that there is a new, more modularized SELinux architecture in FC5 and later (which makes this probably much easier) but I need to support RHEL 4/CentOS, too. I know how to use audit2allow to do some minor modifications but I don't know currently how to build RPM packages which ship a new

I've tried to wrap my head around SELinux several times, and so far, all I've managed to do is rap my head, and then somewhat painfully. Is there a detailed "SELinux Unleashed" style book anybody can recommend? Anybody read Oreilly's book care to comment? Link:

While downloading almost all the guilds I came across a SELINUX Guide. Whats that for? -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20060407/142d9df5/attachment-0001.html>

Hi, I'm using Firestarter as my firewall. If I restart the network or my DSL line goes down, I have to manually restart Firestarter. I have sh /etc/firestarter/firestarter.sh stop and then sh /etc/firestarter/firestarter.sh start in my ip-up.local file. I confirmed ip-up.local us being executed by placing an entry in the logs, but it appears firestarter is not or at least not correctly.

Has anyone got Bastille-linux running on Centos-5.6? http://bastille-linux.sourceforge.net claims RHEL5 support but I ran into problems running it on a Centos 5.6 test system. First I had to "ln -s /usr/lib64/Bastille /usr/lib" just to get it to run at all. Then I tried faking /etc/redhat-release with Red Hat Enterprise Linux Server release 5.6 ... but I get this (why would it want

I installed SeLinux in warn mode. HOw do i check to see what it is wanring about? This wil help me in make a decision to turn it to active mode..:) -- My "Foundation" verse: Isa 54:17 No weapon that is formed against thee shall prosper; and every tongue that shall rise against thee in judgment thou shalt condemn. This is the heritage of the servants of the LORD, and their

Hi, I am planning to use <firestarter> to manage the incoming and outgoing network connections. Please give me some valuable read abouts and tips about this package. - Will it be a good choice for network management? What are the other options? If i choose to install Firestarter : - Have you installed and used Firestarter in CentO 5.5? If yes,Please share the process of installation.

I do not have this directory: /etc/selinux/targeted/src/policy/domains/misc/local.te i dont have the directory src through misc in my /etc/selinux directory. How do i get these directories. Is there a rpm package i need to install? or are those just directories i make my self?

Yesterday I activated SELinux in targeted mode, then I rebooted and started receiving some error messages in the system services initialization: ====================================================================== audit(1156518721.252:2): avc: denied { read } for pid=2223 comm="syslogd" name="libc-2.3.4.so" dev=dm-0 ino=50441 scontext=user_u:system_r:syslogd_t

Hello, I see manage of firewall in CentOS (called security), and seems difficult to manage, not enough powerful. I am searching a middle term between scripts of iptables to manage and Security manager of CentOS. I know FireStarter, another similar? -- Devel in Precio http://www.pas-world.com

Hi All:) I would like to start using a tool for automating of os hardening. I found some informations about Bastille. One things which attracted my attention is that in http://bastille-linux.sourceforge.net/news_updates.htm the last post is from January 29th, 2012 :D Is the tool ready to use at the moment with CentOS 6/7? Are there any alternatives which you can recommend? Thanks for all info

Well I think this system is back on 3.5. How do I tell? Have not used it in a while... I need a NAT for some quick testing and this box was available. Only a 6gb drive, so I can't install Astaro (which I have licenses for). So is there a simple way to turn on NATing? Should I upgrade to 4.2? This box is behind a firewall, so security risks are not the issue. This time.

Hello all, I''m somewhat new to networking, and I''m having trouble masquerading connections that are coming over a bridge. The bridge only has a single port for now, but I''m going to add more ports later. I''m basing my configuration on the two-interface quick start guide. I''m using Shorewall 3.0.4 on Ubuntu Dapper. My network looks like this: * The

I have been reading about software raid. I configured my first software raid system about a month ago. I have 4 500 Gig drives configured in RAID 5 configuration with a total of 1.5TB. Currently I configured the complete individual drivers as software raid, then created a /dev/md0 with the drives I then created a /file_storage partition on /dev/md0. I created my /boot / and swap partitions on

>Date: Sun, 17 Apr 2005 13:28:05 -0400 >From: "ryanag@zoominternet.net" <ryanag@zoominternet.net> >Subject: Re: [Shorewall-users] dumb, dumb question **follow-up on > support-request documentation** >To: Tom Eastep <teastep@shorewall.net> >Cc: Mailing List for Shorewall Users > <shorewall-users@lists.shorewall.net> >Message-ID:

Hi Ignacio, I'm running Centos 4.2 on some machines and just wonder which is the correct procedure to build one of your packages i've fonund in the fedora.ivazquez.net for FC4 but for CentOs for kernel-modules: http://fedora.ivazquez.net/yum/4/i386/SRPMS.ivazquez/kernel-module-qc-usb-0.6.3-0.iva.1.src.rpm

Just two changes: - Beta4's SSL proxying rewrite worked worse than I thought. Reverted it back to original code. - Filesystem quota plugin now looks up the mount path correctly. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 191 bytes Desc: This is a digitally signed message part Url :

Just two changes: - Beta4's SSL proxying rewrite worked worse than I thought. Reverted it back to original code. - Filesystem quota plugin now looks up the mount path correctly. -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 191 bytes Desc: This is a digitally signed message part Url :

I have a client project to implement PCI/DSS compliance. The PCI/DSS auditor has stipulated that the web server, application middleware (tomcat), the db server have to be on different systems. In addition the auditor has also stipulated that there be a NTP server, a "patch" server, The Host OS on all of the above nodes will be CentOS 6.2. Below is a list of things that would be