Displaying 20 results from an estimated 700 matches similar to: "Issues trying to change the selinux context"
2019 May 08
3
Issues trying to change the selinux context
Warren Young wrote:
> On May 8, 2019, at 9:31 AM, mark <m.roth at 5-cent.us> wrote:
>
>> semanage -fcontext -a -t lib_t "/<elided>/smwa/webagent/bin(/.*).so?
>
> [snip]
>
>> What am I doing wrong?
>>
<snip>
> Also, I?m confused by the parens in your file path. Whether your shell
> is or not is a different question.
I'm following
2019 May 08
1
Issues trying to change the selinux context
Warren Young wrote:
> On May 8, 2019, at 11:04 AM, mark <m.roth at 5-cent.us> wrote:
>
>>
>> semanage fcontext -m -t lib_t "/path/smwa/webagent/bin/*.so?
>
> Glob expansion doesn?t happen in double quotes. Not in Bash, anyway.
Huh? I thought it didn't occur in single quotes, but did occur in quotes.
Odd, I'm seeing it doesn't, at least in a basic
2019 Apr 16
4
Time Synchronisation - SELinux Labeling and Policy
hi, i want set selinux to usw with ntpd
but when i run (as described in wiki)
semanage -a -t ntpd_t "/usr/local/samba/var/lib/ntp_signd"
i have that error
"
usage: semanage [-h]
{import,export,login,user,port,ibpkey,ibendport,interface,module,node,fcontext,boolean,permissive,dontaudit}
...
semanage: error: argument subcommand: invalid choice:
2019 May 08
0
Issues trying to change the selinux context
On May 8, 2019, at 9:31 AM, mark <m.roth at 5-cent.us> wrote:
>
> semanage -fcontext -a -t lib_t "/<elided>/smwa/webagent/bin(/.*).so?
[snip]
> What am I doing wrong?
-fcontext isn?t an option, it?s a verb; drop the dash.
Also, I?m confused by the parens in your file path. Whether your shell is or not is a different question.
2019 May 08
0
Issues trying to change the selinux context
On May 8, 2019, at 11:04 AM, mark <m.roth at 5-cent.us> wrote:
>
> semanage fcontext -m -t lib_t "/path/smwa/webagent/bin/*.so?
Glob expansion doesn?t happen in double quotes. Not in Bash, anyway.
2019 Apr 16
0
Time Synchronisation - SELinux Labeling and Policy
On 4/16/19 12:47 PM, Marco Gemignani via samba wrote:
> hi, i want set selinux to usw with ntpd
>
>
> but when i run (as described in wiki)
>
> semanage -a -t ntpd_t "/usr/local/samba/var/lib/ntp_signd"
>
>
> i have that error
> "
> usage: semanage [-h]
>
>
>
2020 Feb 04
5
Relabel /usr directory
Hi,
I've done the following:
- Copy usr content with rsync to another partition:
rsync -av --partial --progress /usr/ /mnt
Then, unmounted, added to fstab a line for /usr, then deleted /usr/* (not
the directory itself). But I've found that is bad labeled:
ls -Z /usr
unconfined_u:object_r:unlabeled_t:s0 bin
unconfined_u:object_r:unlabeled_t:s0 local
unconfined_u:object_r:unlabeled_t:s0
2013 Nov 25
2
ltsp & Selinux
Hello All,
I set up ltsp regulary, on Centos6 machines.
This morning I have a Selinux problem that usualy does not occur:
after setting everything up, the thinclients boot, but nobody can login.
It only works after the command :
# echo 0 > /selinux/enforce
I tried this semanage command:
# semanage fcontext -a -t bin_t /usr/bin/xauth
but it makes no difference.
The message I'm now
2008 Mar 03
1
Unable open raw socket in CentOS 5 - SE Linux and kernel capability interaction?
I am wondering what is the interaction between SE Linux and the kernel
"capabilities" in CentOS 5.1? I'm trying to open a raw socket and keep
getting permission denied errors. I've tried using the lcap library to
find that CAP_SETPCAP appears to be off in the kernel. For compliance
reasons, I don't want to turn this on. I've also tried a hand-crafted
SE Linux
2011 Jun 01
12
[Bug 8201] New: rsync 3.0.8 destroys SELinux security context of symbolic links
https://bugzilla.samba.org/show_bug.cgi?id=8201
Summary: rsync 3.0.8 destroys SELinux security context of
symbolic links
Product: rsync
Version: 3.0.8
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: P5
Component: core
AssignedTo: wayned at samba.org
2017 Oct 23
2
Unable to apply mysqld_db_t to mysql directory
Interesting to see the Equivalence. As a first thing, I tried:
semanage fcontext -a -e /var/lib/mysql.old /var/lib/mysql
then
restorecon -R /var/lib/mysql
# semanage fcontext -lC
SELinux fcontext type
Context
/home/users(/.*)? all files
system_u:object_r:user_home_dir_t:s0
/var/lib/mysql all
2010 Mar 25
3
httpd stopped working under SELinux so I had to turn SELinux off. libxml2.so.2: failed to map segment from shared object: Permission denied
Hi.
CentOS 5.4 64-bit with SELinux, happily running for over a year, suddenly
httpd fails to start up, getting an error message like:
Starting httpd: Syntax error on line X of /etc/httpd/conf.d/php.conf:
Cannot load /etc/httpd/modules/libphp5.so into server: libxml2.so.2:
failed to map segment from shared object: Permission denied
I turned off SELinux and was able to start httpd.
But what went
2017 Oct 23
2
Unable to apply mysqld_db_t to mysql directory
Thanks, I managed to fix /var/lib/mysql
# ls -ldZ /var/lib/mysql
drwxr-xr-x. mysql mysql system_u:object_r:mysqld_db_t:s0 /var/lib/mysql
To fix it, I tried:
semanage fcontext -d -e /var/lib/mysql
this command returned:
KeyError: /var/lib/mysql
I tried restorecon anyway:
restorecon -Rv /var/lib/mysql
But not better:
ls -ldZ /var/lib/mysql
drwxr-xr-x. mysql mysql system_u:object_r:var_lib_t:s0
2017 Oct 23
2
Unable to apply mysqld_db_t to mysql directory
Hello,
A server was configured in /var/lib/myslq in the root fs. I added a LV
specifically for mysql. I stopped myql and renamed /var/lib/mysql to
/var/lib/mysql.old. I created a new dir /var/lib/mysql and mounted the LV
on /var/lib/mysql. I then copied with "cp -prZ" all mysql files in
/var/lib/mysql.old to /var/lib/mysql.
But then I got a selinux problem:
# ls -ldZ mysql.old/
2018 May 04
4
Samba HOWTO wiki bug: chcon samba_share_t
In this wiki article:
https://wiki.centos.org/HowTos/SetUpSamba
?there is a command down in section 2 that gives an error here on CentOS 7:
$ sudo semanage fcontext ?at samba_share_t /path/to/share
?noise noise noise?
semanage: error: unrecognized arguments: samba_share_t /path/to/share
That and the following restorecon command can be replaced by a single shorter command, which
2016 Oct 17
3
SELinux context not applied
Hi,
I tried to apply a security context on a directory with the following
commands:
[root@ local]# semanage fcontext -a -t httpd_sys_rw_content_t "netdot(/.*)?"
[root@ local]# restorecon -R netdot/
When I list the contexts, it is part of the list....
[root@ local]# semanage fcontext -l | grep netdot
./netdot(/.*)? all files
2013 Jan 24
12
group by + sum
Hi.. I need some support...
table:
week_id, user_id, project_id, hours
ex. =>
33, 2, 1, 10
34, 2,1,15
33, 2, 2, 20
35, 3, 1,20
etc.
Want to display a sum of hours per week_id per user_id
I have:
@hours = HourUser.includes(:user).group_by { |h| h.week_id }
@hours.keys.sort.each do |hour|
@hours[hour].collect(&:stunden).sum
Hours are summed up, but not sorted by user_id..
How to get
2018 May 04
3
Samba HOWTO wiki bug: chcon samba_share_t
On Fri, 2018-05-04 at 14:55 -0700, Akemi Yagi wrote:
> On Fri, May 4, 2018 at 2:26 PM, Warren Young <warren at etr-usa.com>
> wrote:
> > On May 4, 2018, at 3:03 PM, Akemi Yagi <amyagi at gmail.com> wrote:
> > >
> > > On Fri, May 4, 2018 at 12:03 PM, Warren Young <warren at etr-usa.com
> > > > wrote:
> > > >
> > > >
2017 Dec 12
4
Spamassassin vs. SELinux trouble
Hi,
Spamassassin has been working nicely on my main server running CentOS 7
and Postfix. SELinux is activated (Enforcing).
Since the most recent update (don't know if it's related to it though)
I'm getting the following SELinux error.
--8<-----------------------------------------------------------------
SELinux is preventing /usr/bin/perl from 'read, write' accesses on
2017 Apr 30
3
selinux problem policies
Hello,
My problem is to add selinux policies
can any help to say what is wrong with my policies
I write this!
semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html(/.*)?/
typo3conf(/.*)?"
I have more instances from typo3
I found this construct in the selinux policies
"/var/www/html(/.*)?/uploads(/.*)?"
but my is not working ?
and I have only errors?
neverallow