Fedora :: SElinux In Permissive Mode
Dec 4, 2009I made the Selinux inactive with easylife how can I reactivate it.
View 6 Replies
ADVERTISEMENT
Fedora Servers :: Samba Share When Selinux Is In Permissive Mode?
May 13, 2009I don't think it has anything to do with the config file. More to do with SElinux. I need to know how to configure SElinux so I can see my samba share when SELinux is on. When I setenforce 0 I can seen all the files and folders set it to setenforce 1 cannot see anything.
Here is the output when I ran [root@fileserver /]# getsebool -a | grep smb
allow_smbd_anon_write --> on
smbd_disable_trans --> on
These two options were off I tried turning them on.
This is another one of the commands I tried running. I did change a few options but I am not sure which I do need to change. I am running a stand alone server so I don't need the DC option.
[root@fileserver /]# getsebool -a | grep samba
samba_domain_controller --> off
samba_enable_home_dirs --> off
samba_export_all_ro --> on
samba_export_all_rw --> off
samba_share_nfs --> off
use_samba_home_dirs --> on
I can also post a copy of my smb.conf file too.
Server :: Can Set Selinux To Permissive / When Reboot It Turns Back On?
Jul 19, 2010It seem that I can set selinux to permissive but when i reboot it turns back on? Can I unistall it? I am running RED HAY 5 and Centos 4
View 2 Replies View RelatedFedora Servers :: SELinux - Find A List Of All The Booleans For SELinux (10) Using Getsebool -a
Feb 23, 2009You can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
View 5 Replies View RelatedUbuntu Security :: Outbound Firewall Protection (permissive Vs. Restrictive) - What's Setup?
Dec 18, 2010Using Windows, I always set a Restrictive firewall policy with a third party firewall. But I also had all ports set to Stealth, something that appears to not offer any security benefits (as I've learned from reading Ubuntu forums). I'd like to learn about best security practices (under Ubuntu) for outgoing firewall protection. I will be using the built-in Ubuntu firewall that is configured via Firestarter. Outgoing filtering offers privacy as well as security benefits. But I thought I needed my ports stealthed to be safe too, so I'm open to learning new things.
I wanted to start a poll to find out how many folks use permissive/restrictive, but no polls allowed here apparently.Could Ubuntu users knowledgeable about firewalls enlighten me on whether I should go Outbound-Restrictive and what applications I will need to allow so Ubuntu "housekeeping" is not affected negatively? I basically just use the internet for software updates, web-surfing and e-mail. One question I have is whether there is something comparable in Ubuntu to Window's "DNS Client" service? I always disabled Window's "DNS Client" and forced each application to request port 53 DNS lookups itself.I only had to allow four programs to accomplish all internet traffic that I engage in. I set all other programs/applications to be either Blocked or to have to Ask for an outgoing connection as needed.Here is my former Windows XP setup:
svchost.exe: allow UDP for ports 53, 67, 68, 123 (time) and TCP for ports 80, 443
Avast: allow UDP for port 53 and TCP for port 80
firefox: allow UDP for port 53 and TCP for ports 80, 443
IE: allow UDP for port 53 and TCP for ports 80, 443
Fedora :: Emacs: Flyspell-mode Not Working In Tex Mode?
Jun 13, 2011I am an emacs user, and I noticed that on my new machine (running F15, 64bit) flyspell-mode will not work in tex mode.
I get errors that look something like this:
Code:
Spell-checking inequality-model.tex using hunspell with default dictionary...
Spell-checking region using hunspell with default dictionary...done
ispell-send-string: Process ispell not running
When done with a buffer, type C-x #
code....
Fedora :: SELinux Will Not Allow Tor?
Jan 17, 2011I'm running into some problems setting up Tor on Fedora 14. I have followed the following guide to a T (although I realize it is for Fedora 10):orum.org/showthread.php?t=211516.I believe the problem is SELinux... but I'm not sure. Has anyone had any success running Tor in Fedora 14 without it bugging out? If not, is there some sort of Unix alternative?
View 12 Replies View RelatedFedora :: NTP Is Blocked By SElinux?
Jul 18, 2009How can I solve the problem?
View 1 Replies View RelatedFedora :: SELinux Does Not Like Wine
Jan 18, 2010There are several options available, such as "Ignore Alert" and "Turn off memory protection". What are the consequences of choosing one or the other?I'm new to Fedora and I'm not familiar with SELinux. Can someone please give me guidelines (or explanation) on how to deal with SELinux alerts?
View 7 Replies View RelatedFedora :: How To Permanently Disable Selinux
Jul 14, 2009I came across the following method of how to permanently disabling selinux and it's notifications. Although changing enforcement from the gui into permissive mode does most of the job, the notifications still pop-up when some applications are started.
So to disable it do the following:
open terminal as root and execute:
Quote:
And then change the SELINUX line to SELINUX=disabled
Quote:
This is it. Now reboot the system and selinux will never bother you again.
If you are not a Fedora user and you are using this forum just because we are cooler here then you will not find the /etc/selinux/config as in the fedora releases. What you need to do is to edit the kernel boot line and add selinux=0 at the end:
Quote:
Reboot the system
Fedora :: Selinux On Encrypted Root?
Oct 2, 2009After my cloning problems this morning were resolved, I have been able to complete conversion of the clone to run from an encrypted root partition. However, I have been unable to enable selinux when running from the encrypted root. /etc/selinux/config contains the settings that work on my unencrypted system
SELINUX=enforcing
SELINUXTYPE=targeted
and it is not disabled from the grub bootline, but the encrypted system always comes up with selinux disabled. Attempting to enable it with the command setenforce 1 fails, and to add insult to injury, the selinux administration-gui shows that it is enabled and enforcing. The cloned, now encrypted, system was cloned via rsync -aHXv, so the selinux contexts/attributes have been maintained as near as I can tell. I did have to disable selinux while performing the rsync of the /selinux directory in order to get it to copy and I am wondering if there was still some issue with this method.
I know some of you are running from encrypted root fs's and was wondering: Do you have selinux enabled and is it functioning properly? Any suggestions as to how I might jumpstart it or force it to run? Maybe I should boot into the system and uninstalling/reinstalling selinux?
Fedora :: OOo Will Not Run With SELinux - Edit Menu
Nov 18, 2009I just upgraded to fedora 12 via clean install with old /home partition and deleting old config files, and here is my issue. I need to edit the menu, and I need to set SELinux to permissive. OOo will not run with SELinux enabled for some reason, and besides, all my systems use SELinux in permissive. These two options no longer exist in the menu
View 7 Replies View RelatedFedora Security :: SELinux Context For Cgi-bin?
Oct 20, 2010I'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
Fedora Security :: Selinux Not Enabled?
Nov 10, 2010Trying to keep selinux enabled. When I start SeLinux Troubleshooter from the menu, which is inautostart as well, It tells me SELinux not enabled, sealert will not run on nonSELinus systems".How do I get SELinux permanently started then
View 10 Replies View RelatedFedora :: Get SELinux And Wine Error
Jan 2, 2011I get the SELinux and wine error. How can this be fixed?
View 1 Replies View RelatedFedora :: SELinux Not Allow Mplayer To Play Flv?
Jan 9, 2011I have trouble with my Fedora 14 on laptop, that I never had on previous Fedora versions (10-13).The SELinux not allow mplayer to play flv files and I cannot convert any files from flv to mp3.I have all codecs installed.Also Totem not works propely.I can shutdown SELinux (but dont want to) but there still remain (already installed) codec, which cant be found (decoder h.264).So its not matter if I shutdown SELinux because I still cant play flv
Ok so there are my error message (sorry for my english!):
Code:
ffmpeg
ffmpeg: error while loading shared libraries: libxvidcore.so.4: cannot enable executable
[code]...
Fedora Security :: How To Enable The SELinux
Jan 17, 2011My newly installed Fedora-14 (64-bit) has SELinux disabled. I can't find any way to enable it. I tried to set it manually in /etc/selinux/config to enforcing or permissive but nothing happens after reboot. In GUI configuration tool it is set to disabled and grayed out so that there is no way to enable it there. Is there another way to enable SELinux?
View 11 Replies View RelatedFedora Security :: SELinux Not Enforcing?
Apr 30, 2011I tried to log in to my xguest account and it asked for a password, which it shouldn't, so there's a problem with SELinux.When I type getenforce it says it is disabled, yet when I go to /etc/selinux and look at the config, it is in enforcing mode and not commented out, type is strict.When I go to the SELinux management GUI I can't change the current enforcing mode and it's set to disabled and default to enforcing.
View 2 Replies View RelatedFedora :: F15 No Selinux Admin App / Get It To Work?
Jul 23, 2011I have a Selinux Troubleshooting app but no Admin. How do I admin it?
View 1 Replies View RelatedRed Hat / Fedora :: SElinux Error And Lock Out
Sep 24, 2010I have accidentally locked myself out in the following manner. I have Fedora 13 with SElinux. The whole hard drive was encrypted at install with Fedora's standard method. Upon logging into a non-root account called "hoss", I set the policy (in gnome) System menu -> Administration -> SElinux administration -> User Mapping -> added the logged on user as a SElinux user with only user_u privileges. After reboot, I successfully log in as hoss, but now I get an error when trying to open the SElinux administration, any open office program, or any task requiring elevation with root password (the prompt never comes up). What is worse is I did not set the ability to login the console as root. This user now does not have write privileges to any of root's documents. I cannot access the hard drive from a remote source because it is encrypted. Is there any way whatsoever to now elevate myself to root to reconfigure SElinux? When I open the SElinux administration Should there not be a prompt that gives me a root password to be able to correct SElinux by removing "hoss" from the list? As of right now this account seems to be totally unable to be elevated to higher privileges. I cannot even use the Add/Remove software feature to apply patches to SElinux without a root password. Elevating to su in bash is also blocked.
View 3 Replies View RelatedRed Hat / Fedora :: Disable Clamav In SElinux?
Jul 5, 2011I get constantly this error, how can disable clamav in SElinux, or there is maybe a rule for it?
SELinux is preventing the clamscan from using potentially mislabeled files (./clamav-366ce73c2b6ad30d9e062d
SELinux is preventing the clamscan from using potentially mislabeled files (/tmp/clamav.577/clamav-9c353ad9c85b
General :: Partition Table From Fdisk - Cylinder Mode - Sector Mode - Expert Mode ?
Aug 30, 2010Below is a print out of my partition Table from Fdisk, in Cylinder mode, Sector mode, and then in expert mode?
Why in expert mode does it look like Partitions 2 and 3 share the same sector / hd / Cylinders? Is this OK?
Code:
Fedora Installation :: Get Around Or Work With SELinux Any Pointers?
Mar 22, 2009I am trying to install MyEclipse on FC10. But, I am getting an SELinux alert saying that myeclipse is attempting to move/change a file - Thus I can't seem to get it installed.
I have NO idea how to get around or work with SELinux any pointers.
Fedora Security :: Prevent Firefox With SELinux?
May 11, 2009I am new to Fedora 10, and to SELinux too.
I would like to know how can I prevent from users with role user_r to connect to Internet with firefox.
Fedora :: Enabling SELinux To Http: FORBIDDEN?
Jun 14, 2009I have al ready Fedora 11 [Leonidas], and when i did copy my old website to /var/www/html/wiki i had this problem trying [URL] : Forbidden You don't have permission to access /wiki/ on this server... i had to type this commands:
[Code]...
Fedora Installation :: Installing MP3 Plug-in And SELinux (was:2 )?
Jul 2, 2009First, hello from me to this forum, i just installed fedora 11 (i switched from ubuntu) Secondly, i need your help about mp3 plugin and this message from setroubleshooter
Code: SELinux is preventing consoletype (consoletype_t) "read write" pppd_t. Now, for the mp3, i installed the xmms()plugin, but it still doesent have sound and it wont open mp3 formats. About the second problem, i read thread that i must make some file and to "allow" the troubleshooter something(dunno what) edit i can play music in a program called xine, but i want to play the music in rhythmbox and movie player ps if there are any more plugins that i need to install for watching movies, please write what i must install
Fedora Security :: SELinux Is Blocking Ipod?
Jul 8, 2009I am running Fedora 11 and every time i plug in my iPod it tells me... SELinux is preventing mkdir (podsleuth_t) "read" security_t ... I have no idea on how to create a policy module to allow access.
View 2 Replies View RelatedFedora :: SELinux Vs Network Manager - How To Interpret
Feb 14, 2010I have a number of errors captured by SELinux against NetworkManager - text of one of those is below. I'm not really sure how to interpret it
[code]...
Fedora :: SELinux Denied Wine-preloader
Mar 16, 2010I keep getting this message : The thing is I dont have wine installed!!!!! SHould I be concerned over this?? Is there a security risk?
View 2 Replies View RelatedFedora Security :: SELinux Relabel Every 3 Boot?
Mar 29, 2010I get a SELinux relabel often even without changing stuff. SELinux troubleshoot doesn't show any error nor are there any messages in /log/messages that give any clue. Where should I look to see whats happening ?
2.6.31.12-174.2.22.fc12.x86_64
selinux-policy-3.6.32-103.fc12