There are several options available, such as "Ignore Alert" and "Turn off memory protection". What are the consequences of choosing one or the other?I'm new to Fedora and I'm not familiar with SELinux. Can someone please give me guidelines (or explanation) on how to deal with SELinux alerts?
View 7 RepliesI get the SELinux and wine error. How can this be fixed?
View 1 Replies View RelatedI keep getting this message : The thing is I dont have wine installed!!!!! SHould I be concerned over this?? Is there a security risk?
View 2 Replies View RelatedI have installed Wine on my Fedora 14 and got Security alert.SELinux has prevented wine from performing an unsafe memory operation.SELinux denied an operation requested by wine-preloader, a program used to run Windows applications under Linux. This program is known to use an unsafe operation on system memory but so are a number of malware/exploit programs which masquerade as wine. If you were attempting to run a Windows program your only choices are to allow this operation and reduce your system security against such malware or to refrain from running Windows applications under Linux. If you were not attempting to run a Windows application this indicates you are likely being attacked by some for of malware or program trying to exploit your system for nefarious purposes. My concern is if i hide this attempt, it will not stop wine to from trying to do it, only hide security alerts. This alert is occurred already nearly 5000 times in last 30 min and counting. Wine server is using 10% CPU on this, so only to hide alerts is not a solution, isn't it?
View 5 Replies View RelatedYou can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
View 5 Replies View RelatedI am new to fedora and installed wine to see if I could get the sony reader software working (required to access sony bookstore from my sony ereader). Well the program did not work though it did create icons on my desktop. wine kept crashing and I said lets just get rid of it. I uninstalled wine via yum remove and nothing appeared to happen so I did rpm -qa |grep wine and saw lots of stuff. So I simply did yum remove wine* and then a rpm -qa |grep wine was empty. however wine is still under applications on my desktop and still has a category for programs--reader. I should also mention that while wine was installed I attempted to remove the reader via the wine uninstalller but a) wine gave a message of a core crash and b) all the uninstaller did was give me the option to reinstall the reader program. so now when I attempt to open an epub it tries with the sony reader software. I know I can just right click to use another program but for now I want wine gone completely from my pc and the sony program gone.
View 2 Replies View RelatedI'm running into some problems setting up Tor on Fedora 14. I have followed the following guide to a T (although I realize it is for Fedora 10):orum.org/showthread.php?t=211516.I believe the problem is SELinux... but I'm not sure. Has anyone had any success running Tor in Fedora 14 without it bugging out? If not, is there some sort of Unix alternative?
View 12 Replies View RelatedHow can I solve the problem?
View 1 Replies View RelatedI came across the following method of how to permanently disabling selinux and it's notifications. Although changing enforcement from the gui into permissive mode does most of the job, the notifications still pop-up when some applications are started.
So to disable it do the following:
open terminal as root and execute:
Quote:
And then change the SELINUX line to SELINUX=disabled
Quote:
This is it. Now reboot the system and selinux will never bother you again.
If you are not a Fedora user and you are using this forum just because we are cooler here then you will not find the /etc/selinux/config as in the fedora releases. What you need to do is to edit the kernel boot line and add selinux=0 at the end:
Quote:
Reboot the system
After my cloning problems this morning were resolved, I have been able to complete conversion of the clone to run from an encrypted root partition. However, I have been unable to enable selinux when running from the encrypted root. /etc/selinux/config contains the settings that work on my unencrypted system
SELINUX=enforcing
SELINUXTYPE=targeted
and it is not disabled from the grub bootline, but the encrypted system always comes up with selinux disabled. Attempting to enable it with the command setenforce 1 fails, and to add insult to injury, the selinux administration-gui shows that it is enabled and enforcing. The cloned, now encrypted, system was cloned via rsync -aHXv, so the selinux contexts/attributes have been maintained as near as I can tell. I did have to disable selinux while performing the rsync of the /selinux directory in order to get it to copy and I am wondering if there was still some issue with this method.
I know some of you are running from encrypted root fs's and was wondering: Do you have selinux enabled and is it functioning properly? Any suggestions as to how I might jumpstart it or force it to run? Maybe I should boot into the system and uninstalling/reinstalling selinux?
I just upgraded to fedora 12 via clean install with old /home partition and deleting old config files, and here is my issue. I need to edit the menu, and I need to set SELinux to permissive. OOo will not run with SELinux enabled for some reason, and besides, all my systems use SELinux in permissive. These two options no longer exist in the menu
View 7 Replies View RelatedI made the Selinux inactive with easylife how can I reactivate it.
View 6 Replies View RelatedI'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
Trying to keep selinux enabled. When I start SeLinux Troubleshooter from the menu, which is inautostart as well, It tells me SELinux not enabled, sealert will not run on nonSELinus systems".How do I get SELinux permanently started then
View 10 Replies View RelatedI have trouble with my Fedora 14 on laptop, that I never had on previous Fedora versions (10-13).The SELinux not allow mplayer to play flv files and I cannot convert any files from flv to mp3.I have all codecs installed.Also Totem not works propely.I can shutdown SELinux (but dont want to) but there still remain (already installed) codec, which cant be found (decoder h.264).So its not matter if I shutdown SELinux because I still cant play flv
Ok so there are my error message (sorry for my english!):
Code:
ffmpeg
ffmpeg: error while loading shared libraries: libxvidcore.so.4: cannot enable executable
[code]...
My newly installed Fedora-14 (64-bit) has SELinux disabled. I can't find any way to enable it. I tried to set it manually in /etc/selinux/config to enforcing or permissive but nothing happens after reboot. In GUI configuration tool it is set to disabled and grayed out so that there is no way to enable it there. Is there another way to enable SELinux?
View 11 Replies View RelatedI tried to log in to my xguest account and it asked for a password, which it shouldn't, so there's a problem with SELinux.When I type getenforce it says it is disabled, yet when I go to /etc/selinux and look at the config, it is in enforcing mode and not commented out, type is strict.When I go to the SELinux management GUI I can't change the current enforcing mode and it's set to disabled and default to enforcing.
View 2 Replies View RelatedI have a Selinux Troubleshooting app but no Admin. How do I admin it?
View 1 Replies View RelatedI have accidentally locked myself out in the following manner. I have Fedora 13 with SElinux. The whole hard drive was encrypted at install with Fedora's standard method. Upon logging into a non-root account called "hoss", I set the policy (in gnome) System menu -> Administration -> SElinux administration -> User Mapping -> added the logged on user as a SElinux user with only user_u privileges. After reboot, I successfully log in as hoss, but now I get an error when trying to open the SElinux administration, any open office program, or any task requiring elevation with root password (the prompt never comes up). What is worse is I did not set the ability to login the console as root. This user now does not have write privileges to any of root's documents. I cannot access the hard drive from a remote source because it is encrypted. Is there any way whatsoever to now elevate myself to root to reconfigure SElinux? When I open the SElinux administration Should there not be a prompt that gives me a root password to be able to correct SElinux by removing "hoss" from the list? As of right now this account seems to be totally unable to be elevated to higher privileges. I cannot even use the Add/Remove software feature to apply patches to SElinux without a root password. Elevating to su in bash is also blocked.
View 3 Replies View RelatedI get constantly this error, how can disable clamav in SElinux, or there is maybe a rule for it?
SELinux is preventing the clamscan from using potentially mislabeled files (./clamav-366ce73c2b6ad30d9e062d
SELinux is preventing the clamscan from using potentially mislabeled files (/tmp/clamav.577/clamav-9c353ad9c85b
when I tried to install wine I got "Missing Dependency: wine-gecko is needed by package wine"so I looked for wine-gecko and download it but also when I tried to install it I got "Missing Dependency: wine-gecko is needed by package wine"it seems that I am in loop each package need the other what to do please?
View 1 Replies View RelatedI am trying to install MyEclipse on FC10. But, I am getting an SELinux alert saying that myeclipse is attempting to move/change a file - Thus I can't seem to get it installed.
I have NO idea how to get around or work with SELinux any pointers.
I am new to Fedora 10, and to SELinux too.
I would like to know how can I prevent from users with role user_r to connect to Internet with firefox.
I have al ready Fedora 11 [Leonidas], and when i did copy my old website to /var/www/html/wiki i had this problem trying [URL] : Forbidden You don't have permission to access /wiki/ on this server... i had to type this commands:
[Code]...
First, hello from me to this forum, i just installed fedora 11 (i switched from ubuntu) Secondly, i need your help about mp3 plugin and this message from setroubleshooter
Code: SELinux is preventing consoletype (consoletype_t) "read write" pppd_t. Now, for the mp3, i installed the xmms()plugin, but it still doesent have sound and it wont open mp3 formats. About the second problem, i read thread that i must make some file and to "allow" the troubleshooter something(dunno what) edit i can play music in a program called xine, but i want to play the music in rhythmbox and movie player ps if there are any more plugins that i need to install for watching movies, please write what i must install
I am running Fedora 11 and every time i plug in my iPod it tells me... SELinux is preventing mkdir (podsleuth_t) "read" security_t ... I have no idea on how to create a policy module to allow access.
View 2 Replies View RelatedI have a number of errors captured by SELinux against NetworkManager - text of one of those is below. I'm not really sure how to interpret it
[code]...
I get a SELinux relabel often even without changing stuff. SELinux troubleshoot doesn't show any error nor are there any messages in /log/messages that give any clue. Where should I look to see whats happening ?
2.6.31.12-174.2.22.fc12.x86_64
selinux-policy-3.6.32-103.fc12
Trying to run Googleearth I got a SELinux denial as I would expect. So I did what I always do, and generated a policy using audit2allow. I have used this method to manage SELinux on various CentOS and Fedora installations before, I don't recognise this problem.I tried the GUI "SELinux Policy Generation Tool" but it closes itself a second after opening so I can't even explore this.
View 9 Replies View RelatedI wonder if SELinux really are necessary for a home desktop ?
It only makes my computer use more problematic than it already is.
What can happend if I uninstall it on my Fedora 13 dist ?
Is the hole Internet going to come in to my computer and destroy it ?
If I uninstall SELinux, is the firewall uninstalled also ?