similar to: CentOS 7 selinux policy bug

What is your environment set up for? Is this just straight out of the box, or have you harden the systems any? -----Original Message----- From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Earl A Ramirez Sent: Friday, May 29, 2015 10:53 AM To: CentOS mailing list Subject: Re: [CentOS] CentOS 7 selinux policy bug On 29 May 2015 at 16:27, <m.roth at

On 29 May 2015 at 16:27, <m.roth at 5-cent.us> wrote: > Hi, folks, > > CentOS 7.1. Selinux policy, and targetted, updated two days ago. > > May 28 17:02:41 <servername> python: SELinux is preventing /usr/bin/bash > from execute access on the file /usr/bin/bash.#012#012***** <...> > May 28 17:02:45 <servername> python: SELinux is preventing

On 05/29/2015 09:20 AM, m.roth at 5-cent.us wrote: > Hi, folks, > > CentOS 7.1. Selinux policy, and targetted, updated two days ago. > > May 28 17:02:41 <servername> python: SELinux is preventing /usr/bin/bash > from execute access on the file /usr/bin/bash.#012#012***** <...> > May 28 17:02:45 <servername> python: SELinux is preventing /usr/bin/bash >

Dear Doc Admins, My name is Earl Ramirez and I have a particular interest with the 'hardening' SIG, therefore I will like to know if its possible for me to have write access to the hardening SIG page [0]. My goal is to kick off the draft and as we come together to decide the goals and direction of the SIG I will update the content accordingly. [0]

I am seeing these in the log of one of our off-site NX hosts running CentOS-6.6. type=AVC msg=audit(1421683972.786:4372): avc: denied { create } for pid=22788 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:system_r:fail2ban_t:s0 tclass=rawip_socket Was caused by: Missing type enforcement (TE) allow rule. You can use

Should the URL match the word used in the subject? [0] [0] http://wiki.centos.org/SpecialInterestGroup/Hardening jerry On Wed, Apr 29, 2015 at 8:45 AM, Alan Bartlett <ajb at elrepo.org> wrote: > On 29 April 2015 at 14:23, Earl A Ramirez <earlaramirez at gmail.com> wrote: >> Dear Doc Admins, >> >> My name is Earl Ramirez and I have a particular interest with the

Dear All I have been working on a custom ISO with kickstart and a couple of post installation scripts and would like to have the script run before the login prompt. The custom ISO works; however, the scripts fails because some of the services, e.g. mariadb does not start before the server installation has been completed and rebooted; therefore, I have been putting the scripts in /etc/profile.d/

Dear All, About a week ago; I posted a proposal over on the centos-devel mailing list, the proposal is for a SIG 'CentOS hardening', there were a few of the members of the community who are also interested in this. Therefore, I am extending that email to this community; where there is a larger community. Some things that we will like to achieve are as follows: SSH: disable root

On Wed, Dec 16, 2015 at 4:47 PM, Earl A Ramirez <earlaramirez at gmail.com> wrote: > I don't see 'System' in any of the CentOS 7.2.1511 boxes or VMs that were > recently upgraded: > ?Hi Earl, Have you tried a new install?? I agree, upgraded installations do not seem to be affected.

Hi Earl, >I think I found your problem, you do not have the correct package installed >[root at c7-db1 ~]# rpm -qa | grep maria >mariadb-libs-5.5.41-2.el7_0.x86_64 >mariadb-server-5.5.41-2.el7_0.x86_64 >mariadb-5.5.41-2.el7_0.x86_64 >[root at c7-db1 ~]# >Install the mariadb-x package and you should be able to start the service Thanks. While I could go with mariadb 5, the

Dear All, I have downloaded CentOS 7.2.1511 DVD and tried to install it on a new laptop that comes with an Intel i7 6th generation processor and don't matter which option I use (install, test media or troubleshooting); I get the following error: [ 0.000000] tsc: Fast TSC calibration failed [ 0.321345] pnp 00:0d: can't evaluate _CRS: 1 At this time I am not able to use any keys on the

Is there a way to increase the audio volume on CentOS 6. I have it set at the max and still very low. Thank you.

Sorry for disturbing all of you again and again. Network service cannot be started. All the commands are not working. How to start network service?net-tool already exists. -- Shiva Prasad Nath 92981134

Hello, I'm a new centos user, finding that some packages are a little old. How do you solve this kind of problems? I want to install newer php. Thank you. Sincerely, Xuwen

Hello, I have a pre-production Intel Skylake server using dual 8176 processors (28 core @2.1Ghz) I have loaded from the DVD distribution CentOS 7.3 and RHEL 7.4 with no problems. When I try and load CentOS 6.9 the boot process hangs just as the Anaconda graphics is started for CentOS configuration. If I use a secondary graphics card then the process completes with no problems and CentOS boots

On 28 Apr 2016 11:24, "Andreas Benzler" <andreas at benzlerweb.de> wrote: > > sure > > Am 28.04.2016 um 11:16 schrieb Earl A Ramirez <earlaramirez at gmail.com>: > > > > On 28 Apr 2016 11:11, "John R Pierce" <pierce at hogranch.com> wrote: > >> > >> On 4/28/2016 2:02 AM, Andreas Benzler wrote: > >>> >

Dear all, I find out of a sudden my?Network?manager cannot connect to the Internet. My OS is Centos 6.7, and the version of?Network?manager is Applet 0.8.1. When clinking the ?Network?manager icon at the upper right conner at the Desktop of my compuer, I can see in the?pop-up?manu that there are two network ?cards (Intel 82573E Gigabit Ethernet Controller (Copper) and Intel 82573L Gigabit Ethernet

Hey all, I just unstalled MariaDB version 10 from the mariadb repositories under a CentOS 7 host. The install went fine! [root at nfsdb1 ~]# rpm -qa | grep -i mariadb MariaDB-common-10.0.19-1.el7.centos.x86_64 MariaDB-server-10.0.19-1.el7.centos.x86_64 MariaDB-client-10.0.19-1.el7.centos.x86_64 MariaDB-shared-10.0.19-1.el7.centos.x86_64 However, when I go to start up the service, I'm

We're forced to use Siteminder, by CA, who have no clue what they're doing in *nix. No packages, tarballs... Anyway, I'm trying clean up some stuff, and in /*/smwa/webagent/bin (all their binaries, including .so's, are in there, duh... I'm trying to set the .so's to lib_t. semanage -fcontext -a -t lib_t "/<elided>/smwa/webagent/bin(/.*).so" gives me the

On 22 April 2015 at 20:49, Mark LaPierre <marklapier at gmail.com> wrote: > On 04/22/15 01:13, Earl A Ramirez wrote: > > Dear All, > > > > About a week ago; I posted a proposal over on the centos-devel mailing > > list, the proposal is for a SIG 'CentOS hardening', there were a few of > > the members of the community who are also interested in this.