Displaying 20 results from an estimated 3000 matches similar to: "C7, mdadm generating selinux warnings"
2018 Mar 04
3
sqlinux weirdness
Every now and then I get an alert like this one. I have no clue what this
"rear" subsystem is, or why madam would be trying to write to its log
file.
Can anyone enlighten me?
thanks in advance!
-------------------------
SELinux is preventing /usr/sbin/mdadm from write access on the file /var/log/rear/rear-fcshome.log.lockless.
***** Plugin restorecon (93.9 confidence) suggests
2018 Mar 04
0
sqlinux weirdness
On 04. mars 2018 03:03, Fred Smith wrote:
> Every now and then I get an alert like this one. I have no clue what this
> "rear" subsystem is, or why madam would be trying to write to its log
> file.
ReaR is Relax-and-Recover tool: http://relax-and-recover.org/
It creates a bootable CD/DVD with all backup content to restore your system.
> If you want to fix the label.
>
2017 Feb 20
0
mdadm vs raidcheck
Hi all!
I don't religiously follow everything that pops up in the selinux
alerts, but now and then I go back and look at some of them.
(I'm on an up to date Centos-7).
Today I noted an error that seems to occur during a weekly raid check,
from /etc/cron.d.
the selinux alert is:
SELinux is preventing /usr/sbin/mdadm from write access on the file /var/log/rear/rear-fcshome.log.lockless.
2017 Dec 12
4
Spamassassin vs. SELinux trouble
Hi,
Spamassassin has been working nicely on my main server running CentOS 7
and Postfix. SELinux is activated (Enforcing).
Since the most recent update (don't know if it's related to it though)
I'm getting the following SELinux error.
--8<-----------------------------------------------------------------
SELinux is preventing /usr/bin/perl from 'read, write' accesses on
2010 Jan 05
1
QEMU/KVM: SELinux denial on /dev/zero when starting a VM
Hi,
on an up to date CentOS 5.4 x86_64 (test machine), I systematically
get the following SELinux denial when I start a QEMU/KVM virtual
machine via virt-manager:
SELinux is preventing qemu-kvm (qemu_t) "execute" to /dev/zero (zero_device_t).
(full alert below)
Running the command suggested by the alert (restorecon -v '/dev/zero')
does not solve the problem.
This does not
2018 Nov 11
0
CentOS 6: Logrotate / selinux problem
Ever since a recent power failure I have been getting a Logrotate error. My
machine is on a UPS -- it shutdown cleanly, but I suspect that its BIOS/RTC
battery is dead, since the machine came up thinking it was 1982 :-(. I reset
the clock and everything is fine, *except* I had to delete Logrotate's state
files (which had bad dates). But now Logrotate is raising the error:
error: error
2012 Feb 24
0
SELinux killed my qemu-kvm
All of a sudden, Virtual Machine Manager (VMM) on a CentOS 5.7 load will
no longer run any VMs.
The VM worked A-OK on the morning of 23 Feb, when I brought it up,
applied the Microsoft updates, rebooted it, installed an application,
rebooted again and ran several tests. Later that day, it wouldn't run.
I didn't have time to diagnose, so I did some investigation a few
minutes ago.
Working
2018 Mar 07
0
An selinux issue
CentUS 7.4
>From sealert:
SELinux is preventing /usr/sbin/sshd from read access on the file
/etc/ssh/moduli.
***** Plugin restorecon (94.8 confidence) suggests
************************
If you want to fix the label.
/etc/ssh/moduli default label should be etc_t.
Then you can run restorecon.
Do
# /sbin/restorecon -v /etc/ssh/moduli
<...>
Additional Information:
Source Context
2007 Apr 20
2
Learning SELINUX management, help?
OK, so setup CENTOS-5 on a laptop to learn about Xen stuff.
KDE Desktop, wanted to print the virt.108.com xen howto.
Needed to setup printer first.
Open KDE control center, go to printers.
Hear error sound, message says
"Unable to retrieve the printer list....
Connection to CUPS server failed. ..."
So I check to see that cups is running (it is).
I check /var/log/messages
2017 Dec 12
0
Spamassassin vs. SELinux trouble
On 12/12/2017 04:37 AM, Nicolas Kovacs wrote:
> Spamassassin has been working nicely on my main server running CentOS 7
> and Postfix. SELinux is activated (Enforcing).
> ...
> SELinux is preventing /usr/bin/perl from 'read, write' accesses on the
> file /var/log/spamassassin/.spamassassin/bayes_toks.
> ...
> Source Context system_u:system_r:spamd_t:s0
2023 Mar 22
1
[libnbd PATCH v4 0/2] lib/utils: introduce async-signal-safe execvpe()
On 3/22/23 12:45, Laszlo Ersek wrote:
> On 3/22/23 12:42, Daniel P. Berrang? wrote:
>> On Wed, Mar 22, 2023 at 12:13:49PM +0100, Laszlo Ersek wrote:
>>> On 3/22/23 11:42, Laszlo Ersek wrote:
>>>
>>>> Now the "podman build -f ci/containers/alpine-edge.Dockerfile -t
>>>> libnbd-alpine-edge" command is failing with a different error
2014 Aug 21
1
CentOS Digest, Vol 115, Issue 21
On Thursday, August 21, 2014 12:00:03 centos-request at centos.org wrote:
> Re: [CentOS] SELinux vs. logwatch and virsh
> From: Daniel J Walsh <dwalsh at redhat.com>
> To: CentOS mailing list <centos at centos.org>
>
> On 08/18/2014 02:13 PM, Bill Gee wrote:
> > Hi Dan -
> >
> > "ausearch -m avc -ts recent" produces no output. If I run it
2013 Nov 25
2
ltsp & Selinux
Hello All,
I set up ltsp regulary, on Centos6 machines.
This morning I have a Selinux problem that usualy does not occur:
after setting everything up, the thinclients boot, but nobody can login.
It only works after the command :
# echo 0 > /selinux/enforce
I tried this semanage command:
# semanage fcontext -a -t bin_t /usr/bin/xauth
but it makes no difference.
The message I'm now
2014 Dec 09
1
CentOS-6.6 - Selinux and Postfix-2.11.1
Applied policy update. Now I see these occasionally. But by the time I try and
see what the matter is the file is gone:
/var/log/maillog
. . .
Dec 9 15:12:08 inet08 postfix/smtp[3670]: fatal: shared lock
active/0A7EC60D8A: Resource temporarily unavailable
. . .
Dec 9 15:12:08 inet08 postfix/smtp[3758]: fatal: shared lock
active/8DD5060F81: Resource temporarily unavailable
. . .
Dec 9 15:12:09
2017 Apr 26
6
NOT Solved - Re: SELinux policy to allow Dovecot to connect to Mysql
On 04/26/2017 04:22 AM, Gordon Messmer wrote:
> On 04/25/2017 03:25 PM, Robert Moskowitz wrote:
>> This made the same content as before that caused problems:
>
> I still don't understand, exactly. Are you seeing *new* problems
> after installing a policy? What are the problems?
>
>> #!!!! The file '/var/lib/mysql/mysql.sock' is mislabeled on your system.
2009 Nov 09
4
SELinux and KVM
I am trying to set up a test kvm virtual machine on a core2 quad
system. I have managed to thread my way through bridging eth0 and I
have a CentOS-5.4 dvd iso prepared.
Using virt-manager, when I try and add a new guest then I get the
error reproduced below. Now, I know that I can 'fix' this by
building a local mod via audit2allow and installing via semodule.
However, I cannot seem to
2017 Jul 29
0
Headphones volume control not working in CentOS 7
On Sat, Jul 29, 2017 at 12:28:40AM +0200, Bernard Lheureux wrote:
> Hi all,
>
> I hope someone could enlighten me...
> How could I resolve the fact that the volume controls of all the
> headphones I try on CentOS 7 are not working, they are OK on CentOS
> 6 but impossible to make them work on my Thinkpad Laptop with an
> iPhone headphones or a Marshal Monitor plugged with a
2012 Jan 13
1
SELinux and rsh+xauth
Hello,
I have a strange (for me) problem with these two machines :
- Client, a CentOS-5.7 workstation ;
- Server, a CentOS-6.2 headless, up-to-date server.
From Client, I want to use xauth on Server with the help of rsh (yes, I
know, ssh and all this sort of things... another time.)
When SELinux is in permissive mode on Server, all these commands
perform as expected :
rsh Server
2017 Dec 04
0
Fwd: Qwery regarding Selinux Change Id context
Hi All,
Thanks for the information.
But after resetting the semanage User/login, and moving the targeted folder
to old one and then install the default target. then also its still showing
the
Id context as context=*system_u:system_r:unconfined_t:s0-s0:c0.c1023.*
*What I observed is after changing the permission using semanage command
also, its still showing the system_u:system_r. *
*Check the
2019 May 01
1
Brasero/cdrecord/growisofs with selinux users confined to staff_u
Hello CentOS / RedHat / IBM folks!
I am wondering if I can get a communication channel opened with
someone who can affect changes win upstream RHEL? I don't have
support accounts with RHEL, and use CentOS almost exclusively. I did
have a direct email conversation with Mr. Daniel Walsh regarding these
problems, but his answer was to create custom policy to allow what's
being denied, as