Fedora Security :: 'restorecon' Does Not Relabel Correctly?
Jul 24, 2009
I have a very curious problem with 'restorecon'.Problem:'restorecon' should relabel the context of the path /maco/glass to system_u:object_r:glass_rw_t:s0, however, it relabels the context tosystem_u:object_r:user_home_dir_t:s0.
The commad that triggers the error:restorecon -F -R -v /maco/glass/Expected result:drwxr-xr-x. 2 system_u:object_r:glass_rw_t:s0 glass glass 4096 2009-07-24 11:32 glassActual result:drwxr-xr-x. 2 system_u:object_r:user_home_dir_t:s0 glass glass 4096 2009-07-24 11:32 glassBackground:I have created a
[code]....
View 3 Replies
ADVERTISEMENT
Mar 5, 2010
When trying to start up the dovecot service the following messages are thrown:
Mar 2 18:40:35 localhost kernel: audit(1267576835.222:7): avc: denied { create } for pid=12781 comm="dovecot" scontext=root:system_r:dovecot_t:s0 tcontext=root:system_r:dovecot_t:s0 tclass=socket
[code]....
View 1 Replies
View Related
Mar 29, 2010
I get a SELinux relabel often even without changing stuff. SELinux troubleshoot doesn't show any error nor are there any messages in /log/messages that give any clue. Where should I look to see whats happening ?
2.6.31.12-174.2.22.fc12.x86_64
selinux-policy-3.6.32-103.fc12
View 2 Replies
View Related
Dec 29, 2010
I wanted to edit the Selinux policies using a GUI and i read that there's seedit. The problem was the selinux-policy-targeted package. It was conflicting every time i wanted seedit. I uninstalled the selinux-policy targeted and was able to install seedit. After that, I did ./seedit-init, after that i just entered reboot. Was there supposed to be a button or anything popping up after the seedit-init?
So it reboots, and during the first reboot, a bunch of words flashed, and i see some words like Green [OK]. It was very quick so i have no idea what it said. It then reboots again and it loads but now after the fedora loading bar and word turns grey, it just stops. Nothing else happens. I can type things in, but just that, nothing else. Ctrl+Alt+Delete restarts it though.
So my problem is, is it still relabeling? Because that's what I'm told seedit is doing; relabeling all the policies. If so, how long does it take?And if it's not relabeling, then did something happen a long the way?I started the seedit around 3ish and it's almost 8 already. I'm currently using Fedora 14 with a 500gb HDD. However, i partitioned 11gig for the fedora, and the rest is for Windows 7. So basically it is a dual-boot.okay, after much waiting, it was an error =/. I just don't know why though. I did a restart, made the kernal disable selinux and went and uninstalled seedit. I reapplid the selinux-policy-target. I did a restart and there it was, telling me it had to relabel.
View 7 Replies
View Related
Sep 10, 2009
I recently made a custom spin of fedora on 29th August 2009. It initially failed to go past the slash screen but a solution was found here on fedora forum. It included adding the following to kernel line in grub.
enforcing=0
I later checked SElinux and found the option to do a filesystem relabel at next boot was enabled. I rebooted the system without adding the above words "enforcing=o" and it got stuck after the the splash screen (the blue screen with a fedora bubble). I then did some more research on SElinux and filesystem relabelling. There were several comments that said that a notice is given in the event of a filesystem relabel. I went to the konsole and as root I wrote the following commands:
touch /.autorelabel
reboot
I gave my pc 20Hrs 48min and nothing happened. My HDD is 80GB but it only had 7.5GB of data. There were no messages that indicated that the filesystem relabel was in progress or even if it had started. I also tried the following command but failed:
make relabel
I have now had to edit grub.conf and added the words "enforcing=0" as it is the only way the system will go passed the splash screen.
View 13 Replies
View Related
Apr 27, 2011
I've moved my /var/log directory to another disk (/mnt/serverlogs) and created a symlink for the original directory:
Code:
[root@fileserver2 var]# ls -aldZ /var/log
lrwxrwxrwx. root root unconfined_u:object_r:var_t:s0 /var/log -> /data/serverlogs
[root@fileserver2 var]# ls -aldZ /data/serverlogs
drwxr-xr-x. root root system_u:object_r:var_log_t /data/serverlogs
I have SELinux set to permissive and am getting lots of errors because the contexts are incorrect after a filesystem relabel. e.g.
Code:
[root@fileserver2 var]# ls -alZ /data/serverlogs/messages
-rw-------. root root system_u:object_r:default_t:s0 /data/serverlogs/messages
I believe that this file should be var_log_t.How can I restore the correct context to all of the files in /var/log?I've tried running:
Code:
restorecon -vR /var/log/
But this does not change the contexts, I guess because the files are now in the 'incorrect' location. I've looked through the file: /etc/selinux/targeted/contexts/files/file_contexts which I believe contains the original/default settings - maybe I need to alter this file to fix the problem? I've also tried modifying /data/serverlogs using:
Code:
semanage fcontext -a -t var_log_t /data/serverlogs
which fixes the directory itself, but not the contents,
View 8 Replies
View Related
Aug 5, 2010
I restored a whole filesystem from a backup using rdiff-backup and made it bootable from a modified CentOS 5 CD ROM.All works well except all the files have SeLinux context ofroot:object_r:file_t:s0I tried rebooting with .autorelable and it seems to take no time and reboots immediately after starting. After, there is no change in the contexts of the files.I also tried fixfiles and restorecon with and without selinux enabled and in all cases it takes no time and returns no error code i.e. it does nothing. Nothing in the system log either.
View 3 Replies
View Related
Nov 22, 2010
On boot I get
** Warning -- SELinux relabel is required. ***
*** Disabling security enforcement. ***
*** Relabeling could take a very long time, ***
*** depending on file system size. ***
On the next screen the boot hangs. There is a solution posted here: [URL] it states I booted my VM from a rescue CD ISO, mounted the root directory, and:
# cd /mnt/local
# rm -f .autorelabel
Once this is done you may want to consider upgrading your VM to more -current that has this fixed. I've booted using a knoppix CD, but I don't know how to mount the root directory to try the fix.
View 6 Replies
View Related
Jan 21, 2011
Ah, this time you've really screwed it up without covering you traces: F14 does not interpret correctly my (possibly botched up) ACPI tables and HANGS!!! With acpi=off I have to press the power button to switch my desktop off and that is really ANNOYING. Surely the Fedora engineers could have done a better job with this one.
View 14 Replies
View Related
Mar 3, 2010
About two days ago, Yum started complaining about having a corrupt RPM db, so I hit google and looked up the procedures for rebuilding the DB, and I think I broke it more than fixed it. Now, when I issue a
Code:
root@BLACKHEARTED ~# yum -y update
Traceback (most recent call last):
File "/usr/bin/yum", line 29, in <module>
yummain.user_main(sys.argv[1:], exit_code=True)
[code]....
View 20 Replies
View Related
Jun 14, 2010
When I boot my computer, I can see dvd-rw drive detected correctly, though 9 times out of 10 it does not get detected by OS - drive's icon is not present in nautilus hence I cannot access any cd or dvd. Although when I restart a computer and try to boot from cd or dvd - it works perfectly, then after coming back to the os the cd/dvd won't be accessible. I a have Fedora 13 installed from the DVD ISO.
View 4 Replies
View Related
Feb 8, 2009
I have a dedicated server with fc-9. I have several domains. They are located in /home/domainname/html Under each /home/domainname I have added a webalizer.conf file. Recently I moved video files into a subdomain so I could track usage and generate reports on the use of these video files. Hence the main domain html files call the sub-domain to present flash files for viewing and .avi, .ogm, mp4, etc files for downloading.
So I have for directories:
/home/domain/html
/home/domain_files/html
I set up the domain_files as I have the main domain with access_log and error_log. I set up webalizer to analyze every day at midnight. What I get for webalizer results is links back to Sept, even though the logfile's first enter is in January. I also see many files in the report that are from a totally different domain. I have checked carefully and in webalizer.conf I have: LogFile /home/domain_files/access_log I'm lost. I haven't a clue what's wrong. If webalizer can't do this is there another simple logfile analyzer that can give me video usage?
View 1 Replies
View Related
Jan 22, 2010
I installed google-earth (newest) and when it failed to work I tried adding the /usr/google-earth dir to the library path via /etc/ld.so.conf.d/google-earth.conf ( i made this file and added the /usr/google-earth dir to it) this didn't work and I found the correct work around to remove the included libs in the /usr/google-earth dir forgetting to remove the first workaround i did.
now it gets weird... a little while after I ran gthumb and it crashed... run it in a terminal and I see it complaining about the same files as google earth was before ... uh oh i thought and removed my fix and rebooted... well X wouldn't start after that and I thought maybe I have to rebuild /etc/ld.so.cache so I ran ldconfig and reboot and now everythign works great EXCEPT when I open the "Computer" or Trash Icon from the desktop or menu the background is white (normally black) until i click view->compact or view->icon and it goes back to black... this repeats everytime I open the window and all newly open windowsI created a new user to test to see it it was profile related and the new user has the same behaviour.Fedora 12 (upgraded since fc7)Edit: I see this in ~/.xsession-errors
Code:
(nautilus:445): Eel-WARNING **: "nautilus-directory.c: directories" hash table s
till has 3 elements at quit time
[code]....
View 12 Replies
View Related
Jun 3, 2010
After upgrading my Sony VAIO from Fedora 12 to Fedora 13 my NFS shares don't seem to be working correctly. First of all, mounting them via /etc/fstab is quite slow now. More importantly, When I transfer files from my laptop client to my NFS share, the owner/group on the client become "nobody". However, on the NFS server, they are both "root". I am using a script containing "cp" commands to perform backups of certain directories, retaining original owner/group info. Since the Fedora 13 upgrade, the script complains with each file that it was unable to preserve the information, and the end of the line always contains "Invalid argument".
As a last resort, I upgraded the 'server' (a 64 bit version) from Fedora 12 to Fedora 13. There has been no improvement.
View 4 Replies
View Related
Jul 15, 2010
My phpMyAdmin is showing up only a blank screen with its favicon.What kind of error is this?
View 1 Replies
View Related
Dec 4, 2010
I had a RAID1 array with two disks. I wanted to remove one of the disk and replace it by a new one. I first expanded the array from 2 to 3 components and let RAID rebuild completely. When this was done I used Gnome disk utility (palimpsest) to remove the component on the disk I want to get rid of. It looks like palimpsest did mess up somewhere because the array is no displaying as degraded. How can I get rid of the "removed" entry (was /dev/sdc1) in the RAID array (and hopefully have it come in Running state)?
#/sbin/mdadm --detail
Raid Level : raid1
Array Size : 732570841 (698.63 GiB 750.15 GB)
[code].....
View 1 Replies
View Related
Jun 20, 2011
I have a strange problem, icons are not showing up correctly in various places, attaching some screens to better show the problem.
Anything I open that has a notification icon, just appears exactly the same, as you can see in one of the screens even hovering over certain things brings up that same icon...
Edit: After some searching I see it's an nvidia bug...
View 1 Replies
View Related
Jun 20, 2011
fonts not showing up correctly in web browsers and the likes, more specifically bold fonts. On some sites, these show up correctly, but on others, they don't. I have no idea what's causing this, as it seems to have happened without me doing anything (like, literally, I opened a terminal window, then went back to my browser (Chrome, but I suppose that doesn't matter, as it happens on all browsers) and the problem showed up. Note that these fonts used to show up just fine.
View 14 Replies
View Related
Sep 7, 2011
I am running Fedora release 14 (Laughlin) and my Vim version is 'VIM - Vi IMproved 7.3 (2010 Aug 15, compiled Nov 16 2010 17:05:33)'. I've been trying for quite some time to get a more informative status line in my Vim window but to no avail. I am pasting my very last effort which is as simple as possible. Here is my .vimrc file:
Code:
set statusline=%B
set laststatus=2
Here is what the status line shows:
Code:
Documents/Work/fileName.txt
The .vimrc file does get processed, I've tried many other 'set statusline' combinations but everything failed.
View 1 Replies
View Related
May 1, 2009
I have a laptop that doesn't display correctly since installing F10 x86-64. Instead of using the i810 driver, I see the experimental intel driver. I am running on a Dell D630 laptop with the default intel integrated graphics.
Just to note: Running gnome. I tried KDE and I can actually get this to work and display in 1600x1200. I don't want, "well use kde then" to be the solution. Also, in gnome, if I go to the screen resolution option from the menu, the mirron screens is clicked. Even when I detect monitors and unselect the mirror screens and pick the correct resolution, when I click OK, the screen flickers, and I go back to the same screen with the original default values? Wierd.
I got the bright idea to install system-config-display (something like that), which installed fine. I then changed my default resolution to 800x640 just to try it (really want 1600x1200). Well, I decided to reboot. Not the laptop doesn't start, it stops right after loading anaconda, and just won't go any further.
So two questions:
1. What do I need to change to get the laptop to actually boot?
2. How to get the external monitor to display in 1600x1200.
View 1 Replies
View Related
Jul 17, 2009
Recently when I booted up my computer I get an error at the login screen.
"Install problem! The configuration defaults for GNOME Power Manager have not been installed correctly. Please contact your computer administrator."
When I try to login in, nothing happens. I cant seem to get past the login screen.
View 11 Replies
View Related
Aug 24, 2009
I went through the Fedora 11 DVD setup process up to the partition screen, which does show my external SATA drive correct as; /dev/sda when connected by eSATA, but it shows the internal drive which is a standard IDE, as; /dev/sdf , when it should be as; sdb, why ? I did run that fdisk -l in a terminal from one of my other installed Linux, and it did show drives as correct, ( sda, sdb ). I think this may be a issue related to the digital media card reader built into this 2006 Gateway desktop computer being detected as drives like Windows does and assigns drive letters, or is this some bug in Fedora 11 ?
Disk /dev/sda: 250.0 GB, 250059350016 bytes
255 heads, 63 sectors/track, 30401 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Disk identifier: 0x826d56f6
Device Boot Start End Blocks Id System
/dev/sda1 * 1 26 208813+ 83 Linux
/dev/sda2 27 1958 15518790 83 Linux
[code]....
View 6 Replies
View Related
Nov 2, 2009
Recently I installed FC 11 on my laptop. The OS is not displaying the battery status correctly in the notification area. if I remove the power cord after 100 % charging, the status remains the same even during discharging. It never informs me the correct discharge status or any warning when the battery power is critically low. This is causing unexpected shut downs and data loss to me. Is this a bug ? Do we have a solution for this. My laptop is Compaq CQ40-327TU; dual boot with Vista as alternate OS.
View 5 Replies
View Related
Dec 24, 2010
I'm a very new Fedora user, and I've stumbled upon an issue which I can't seem to resolve. Having had a good look through similar issues, I'm still stuck.I have a Fujitsu Siemens Amilo M3438G laptop, upon which I've recently installed Fedora 14. It seems to work great apart from one thing; CPU speed. The processor in the laptop should run at 2GHz. At the moment, it's running at 600MHz, and I simply can't get it any higher.
I've played around with power profiles a bit, not really knowing what I'm doing, but the issue seems to be that the CPU is somehow reporting to the Operating System that it's top speed is 600MHz.The BIOS on this laptop is very limited, and doesn't give me any clocking options whatsoever, so I can't manually set things like multipliers, etc.So, I guess my first question would be - how does the OS find out what the processor speed is, and is there any way of manipulating the top speed? Surely there must be a way for Speedstep compatible processors to exceed their initial clocks?
View 9 Replies
View Related
Feb 27, 2011
I have a HPL2045W LCD monitor connected to my Fedora 14 PC through a Belkin KVM switch. On Fedora 12, the screen resolution (upto 1680x1050) was correctly recognised, but in Fedora 14, the best I can get is 1024x768. How do I correct this obvious error?My graphics card is an ATI Radeon RV2600 which has worked flawlessly for several years, until this version of Fedora.
View 12 Replies
View Related
Jun 24, 2011
My DVD-ROM drive seems to have issues under Fedora 15.This is the "normal" spin with GNOME3, all updates have been installed.First off, the drive seems to get "stuck" will not eject any media once inserted.Occaisionally, if I just keep pressing the eject button, the media tray will jump out, but then will immediately pull itself back in without any interaction from me.Second issue: video DVDs do not mount. It does not seem to matter if libdvdcss is installed or not. When a DVD video disc is inserted, the DVD drive completely disappears from Nautilus' Computer window. Once I eject the DVD (after pressing eject 50 times) the drive comes back to the Computer window.The drive is a Plextor DVD-RW PX-755SA connected via SATAI have tried using either regular IDE or AHCI configuration in the BIOS for it, no change either way.The drive works fine under Ubuntu and OpenSUSE, but I like F15 better and would like to get this fixed.
View 2 Replies
View Related
Jul 12, 2011
fc14 do not handle nis info correctly when showing my network homedir. It is shown as "nobody nobody". Local files are shown with correct UID:GID
When I log in on an RedHat el5 machine (on the same network), every thing is ok, but when I log in on a fc14 machine my network homedir files are shown as "nobody nobody"
My homedir is placed on a REDHat el6 and using nfsv4
Does anyone have a clue as to where configuartion can be changed?
View 4 Replies
View Related
Jul 26, 2011
Today my desktop reverted to 1024x768 resolution immediately after init. I tried changing it back but only 1024x768 and 800x600 are listed as supported in the display settings, even though my monitor supports resolutions of up to 1360x768. Rebooting the system did not solve the problem.I'm running Fedora 15 x86_64 on kernel 2.6.38.8-35 with the proprietary nvidia drivers of version 275.09.07. My monitor is a Samsung SyncMaster 933n. nvidia-settings is apparently not detecting it correctly, it thinks I'm using a CRT monitor.I was actually in this exact same situation a few months back, but it kind of went away on its own, so I didn't mind too much. So, what could be causing this, and what can I do?
View 13 Replies
View Related
Jul 28, 2011
I've just managed to compress my LVs, extend my VG to my new SSD, move the LVs to the SSD and remove the old disk from the VG. All is well and good (mind you, I did kill my /home partition but it's sorted now...)
My next step was to shrink the PV (I think that's what I want to shrink?) so that I can add another partition to the SSD (to reduce compile times). See below for my current setup. I have a 35G PV with LVs totalling around 33G but the "partition" of the LVM is still 58G.
Code:
View 4 Replies
View Related
Apr 3, 2010
how to check linux operating system is completely and correctly installed with all drivers.
View 6 Replies
View Related
