similar to: Customizing SELinux Policy

On 12/23/2015 02:36 PM, Paul Heinlein wrote: > On Wed, 23 Dec 2015, Robert Moskowitz wrote: > >> Pulling out what little hair I have here, but stumbled onto a >> possible problem. >> >> I have a server running C6 apache that is set up with personal >> directories and no problem showing the files. >> >> You can see it at:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello ! What to do if after reboot, your LVs get inactive ? Maybe add the following to /etc/rc.local : {{{ # # Mounting MyLogVols # /usr/sbin/vgchange -a y MyVolGroup for i in `ls /dev/Backup/`; do e2fsck -p /dev/Backup/$i case $? in 0) mount -t ext3 /dev/MyVolGroup/$i /mnt/MyVolGroup/$i

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I've been working in the bash scripts used in the page http://wiki.centos.org/HowTos/Chroot_Vsftpd_with_non-system_users Some of the changes are: - - Add vsftpd TLS support in the configuration. So USER and PASS don't be clearly readable. - - If SELinux is available, set the boolean allow_ftpd_anon_write to on in the configuration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Well, it seems like my gnome terminal can't interpret Korean translations very well. Or maybe it can and I don't know how to confirm it ? I tried the following encoding characters in the gnome terminal: Current Local (UTF-8) Korean (EUC-KR) Korean (UHC) Korean (JOHAB) and all I can see are question marks inside black rhombus. That

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Guys, Our Anaconda Slide rendering environment is near to be functional, so I'm wondering if you'd like to add new slides and if translators could take a look at the translations we have now ? Actually we have two Slide designs to choose from: 1. The common Title, Content slides [1]. 2. The common Title, Content slides plus related icon

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Guys, To organize ideas about the unification of CentOS authentication I propose you to use the following wiki page: http://wiki.centos.org/HowTos/UnifyAuthentication I've already started it with some headers. You are welcome to improve it. Don't know if it is in the correct place and if the headers are appropriated. I've put there

How to resolve this SElinux problem? type=USER_AVC msg=audit(1513478641.700:1920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { reload } for auid=0 uid=0 gid=0 cmdline="/usr/bin/systemctl reload named-chroot.service" scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:system_r:init_t:s0 tclass=service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Could we organize the anaconda slide translation guide in the page: https://projects.centos.org/trac/artwork/wiki/HowToTranslateSlides It already has some some headers. Best Regards, - -- Alain Reguera Delgado <al at ciget.cienfuegos.cu> -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with CentOS -

On 12/23/2015 12:05 PM, Robert Moskowitz wrote: >> If SELinux is working, then do >> >> setsebool -P httpd_enable_homedirs on > > Did not help. > > in messages I see: > > Dec 23 14:54:04 medon dbus-daemon: dbus[444]: avc: received > policyload notice (seqno=3) > Dec 23 14:54:04 medon dbus[444]: avc: received policyload notice > (seqno=3) > Dec

On 12/23/2015 04:36 PM, ????????? ???????? wrote: > Robert Moskowitz ????? 2015-12-23 23:56: >> On 12/23/2015 03:26 PM, John R Pierce wrote: >>> On 12/23/2015 12:05 PM, Robert Moskowitz wrote: >>>>> If SELinux is working, then do >>>>> >>>>> setsebool -P httpd_enable_homedirs on >>>> >>>> Did not help.

Hi folks, I've been googling for an hour on this which seems to be awfully basic. But I cannot find anything definitive. [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: Access denied [root at centos-gig ~]# setenforce 0 [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: No such file or directory Have tried things like : chcon

Hi folks, I've been googling for an hour on this which seems to be awfully basic. But I cannot find anything definitive. [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: Access denied [root at centos-gig ~]# setenforce 0 [root at centos-gig ~]# systemctl enable smb.service Failed to execute operation: No such file or directory Have tried things like : chcon

Pulling out what little hair I have here, but stumbled onto a possible problem. I have a server running C6 apache that is set up with personal directories and no problem showing the files. You can see it at: medon.htt-consult.com/~rgm/pogo So I have a C7 apache server I am building. Files I create on the new server are listing fine. Files I have copied (with cp -avr ...) get permission

I'm seeing this in /var/log/messages: Oct 7 20:46:25 centos dbus: Can't send to audit system: USER_AVC avc: received setenforce notice (enforcing=0) : exe="?" (sauid=81, hostname=?, addr=?, terminal=?) Some googling suggested this was due to a policy issue a year ago, but I'm seeing it with selinux-policy-targeted-2.4.6-30.el5. I've got a game server program (Enemy

Hi! I'm trying to figure out what's going wrong with a "simple" FTPS setup and VSFTPD. I saw references on Google and tried, and tried, and tried... without success. I'll start by explaining my situation: I have a WEB development server behind a firewall. It's currently only for the intranet. We now have an external company that will have to do a new website

Hey Alain, Nice work on the updated admonitions here: http://wiki.centos.org/HowTos/Wiki/Editing IMHO they look great, and a nice improvement on the previous set. Thanks for the hard work making our wiki pages look great! Ned

Good day all, I have followed the wiki article on setting up vsftpd on centos with virtual users. I was wondering if anyone had an example of knowledge on how to add another "readonly" user. I don't want to enable anon access. The issue I have is that the tutorial (from the wiki) uses the same real system user (ftp) - so permissions don't apply. d

I have a large file that has a line like: bindaddr=0.0.0.0 ; some other text I want to replace the 0.0.0.0 with my address 192.168.1.8 and remove everything else on the line to get: bindaddr=192.168.1.8 How can I do that? Thanks, jerry

Gordon, Thank you for your help on this. Still not working... On 04/26/2017 06:27 PM, Gordon Messmer wrote: > On 04/26/2017 12:29 AM, Robert Moskowitz wrote: >> But the policy generates errors. I will have to submit a bug report, >> it seems > > > A bug report would probably be helpful. > > I'm looking back at the message you wrote describing errors in >

Hello to all those of the list, I introduce myself: My name is Lester Espinosa Mart?nez, I live in Cienfuegos, a city of Cuba. I am interested in helping Wiki of CentOS working in translating from English to Spanish. I met the Wiki of CentOS thanks for a great one my friends called: Alain Reguera Delgado, and I also collaborated in translating articles of last Wiki of CentOS in Spanish. My