Fedora Security :: SELinux Complaining About / Home Label Since After Todays Updates
Nov 5, 2009I get spammed with this message by the troubleshooter, is the audit-libs package related to this ? there was an update today.
View 2 Replies
ADVERTISEMENT
Fedora Security :: Print - SELinux Is Preventing Access To Files With The Default Label - Default_t
Mar 13, 2009I went to print something and I get this message: Summary: SELinux is preventing access to files with the default label, default_t.
Detailed Description: SELinux permission checks on files labeled default_t are being denied. These files/directories have the default label on them. This can indicate a labeling problem, especially if the files being referred to are not top level directories. Any files/directories under standard system directories, /usr, /var. /dev, /tmp, ..., should not be labeled with the default label. The default label is for files/directories which do not have a label on a parent directory. So if you create a new directory in / you might legitimately get this label.
Ubuntu :: What's With Todays Updates - Internet Security Fixed
Oct 23, 2010What's with todays updates? Webkit librarys and Firefox updates. Was there a security issue that's just recently been fixed? Just wondering, I'm obviously going to install them.
View 1 Replies View RelatedFedora Security :: SELinux Really Necessary For Home Desktop?
Jul 11, 2010I wonder if SELinux really are necessary for a home desktop ?
It only makes my computer use more problematic than it already is.
What can happend if I uninstall it on my Fedora 13 dist ?
Is the hole Internet going to come in to my computer and destroy it ?
If I uninstall SELinux, is the firewall uninstalled also ?
Ubuntu :: Installed Todays Updates Now Can't Close FF Window
Oct 12, 2010Everything was fine and dandy then I installed tonight's updates (about 6 of them - 2 or 3 for GTK and a couple of others) and now the close button at top right of the Firefox window doesn't work The buttons are still there, and the minimize and restore work ok, but the close button just flickers and leaves the window open. Also, if I right-click the tell-tale in the bottom bar of the desktop and slect "close" nothing happens. The FF window stays there
I can't think of any other way to close the window besides ending the processes in System Monitor. I can open other windows (like Home folder or Synaptic) and close those without a problem by clicking on the close button. It's just Firefox with the problem, so I don't think it is a Window Manager problem.
Fedora :: Disabled SELinux And The Firewall Before Began Updates?
Jan 18, 2010I've just installed Fedora 12 (32 bit) KDE on my test system and have a couple of issues.I haven't played with Fedora for a couple of years, so I'm not very familiar with it. I haven't had the problems with Kubuntu, OpenSUSE nor Mandriva, so I'm a bit in the dark here. I'll see if someone can help me with my sound issue, before moving on to the next problem. I've read seveal posts about sound issues, but not sure exactly if any are the same as I'm having.
After installing Fedora 12, sound was all working fine. I think installed all the available updates, which is when the problem began. Basically, I have sound in Hulu, Firefox videos such as CNN, etc. But, I have no sound at startup or shutdown....system sounds, I suppose I should say. I have disabled SELinux and the firewall, before I began updates. Looking in KInfoCenter under Audio, I see:
Audio Devices: NOT ENABLED IN CONF VIA8247 with ALC655 at 0xc400 IRQ11 In System Settings>Multimedia I see Internal Audio Analog Stereo as the only device shown. I have unchecked Mute and have all volume controls up all the way in KMix, which shows HDA Nvidia on the tab.
Fedora Security :: Wierd SeLinux Security Alerts \ Got:Code:Summary: System May Be Seriously Compromised?
Apr 13, 2011this is the allert i got:Code:Summary:Your system may be seriously compromised! /usr/sbin/NetworkManager tried to loada kernel module.Detailed Description:SELinux has prevented NetworkManager from loading a kernel module. All confinedprograms that need to load kernel modules should have already had policy writtenfor them. If a compromised application tries to modify the kernel this AVC willbe generated. This is a serious issue.Your system may very well be compromised.Allowing Access:Contact your security administrator and report this issue.Additional Information:
Source Context system_u:system_r:NetworkManager_t:s0
Target Context system_u:system_r:NetworkManager_t:s0
Target Objects None [ capability ]
[code]....
Red Hat / Fedora :: File Repair - Fsck.ext3: Unable To Resolve 'LABEL=/home' FAILED
Jul 27, 2010while rebooting the system i had supposed to go to file repair system with the problem
fsck.ext3: Unable to resolve 'LABEL=/home' FAILED.
*** An error occurred during the file system check.
*** Dropping you to a shell; the system will reboot.
*** When you leave the shell.
Give root password for maintenance (or type Control-D) (repair file system)# how do i get the system reboot
Ubuntu Security :: ISP Keeps Complaining About Infected Computer
Feb 27, 2011For a while my ISP has been sending me emails regarding an infected computer or computers on my local network. There are 4 computers running linux and 3 running windows on said network (3x ubuntu, gentoo, 2x windows server 2003 and windows 7).Now, I haven't used Windows in oh so many years and am not responsible for those computers on this network. Does it seem like this is a virus on a Windows host or should I research and adjust my iptables settings on the router? The applied anti-virus software (I don't know which one) apparently does not find any infections. On my workstation I'm using spotify and win32 office through wine, both obtained from legal and trusted sources, and would thus not consider my wine environment a threat.
View 4 Replies View RelatedFedora :: 12 SELinux Context Not Updated When Changing User's Home Directory
Feb 15, 2010I was setting up a Samba server and I ran into some problems with SELinux related to the context of the home directories. I made a user account, say "UserAccount", with a default home directory "home/UserAccount". Afterwards I realized that I needed to move the home directory of this particular user to another location, say "/home2/UserAccount". So I created the new directory, changed the permissions, and used Gnome's system-config-user to change the user's home directory.
I then set-up the Samba server, activated samba_run_unconfined and samba_enable_home_dirs in SELinux, and made an account for UserAccount. When testing the Samba account for UserAccount SELinux denied read access. I checked the context and the new home directory did not appeared to have been updated. I had to manually run:
restorecon -R -v /home2/UserAccount
to set the context on the new home directory. I'm not very familiar with SELinux, so my question is this: is this normal security policy or is a bug in the system-config-user tool? If it's normal policy can someone explain why? I'm always ready to learn Distro: Fedora 12 (kernel: 2.6.31.5-127.fc12.i686) System: Dual Intel Xeon @ 3.2 GHz, 1 GB RAM
Fedora Security :: SELinux Context For Cgi-bin?
Oct 20, 2010I'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
Fedora Security :: Selinux Not Enabled?
Nov 10, 2010Trying to keep selinux enabled. When I start SeLinux Troubleshooter from the menu, which is inautostart as well, It tells me SELinux not enabled, sealert will not run on nonSELinus systems".How do I get SELinux permanently started then
View 10 Replies View RelatedFedora Security :: How To Enable The SELinux
Jan 17, 2011My newly installed Fedora-14 (64-bit) has SELinux disabled. I can't find any way to enable it. I tried to set it manually in /etc/selinux/config to enforcing or permissive but nothing happens after reboot. In GUI configuration tool it is set to disabled and grayed out so that there is no way to enable it there. Is there another way to enable SELinux?
View 11 Replies View RelatedFedora Security :: SELinux Not Enforcing?
Apr 30, 2011I tried to log in to my xguest account and it asked for a password, which it shouldn't, so there's a problem with SELinux.When I type getenforce it says it is disabled, yet when I go to /etc/selinux and look at the config, it is in enforcing mode and not commented out, type is strict.When I go to the SELinux management GUI I can't change the current enforcing mode and it's set to disabled and default to enforcing.
View 2 Replies View RelatedRed Hat / Fedora :: SELinux Is Preventing The Samba Daemon From Reading Users' Home Directories
Sep 1, 2010My Fedora box is giving me an SELinux security error:
Code: Summary:
SELinux is preventing the samba daemon from reading users' home directories.
Detailed Description:
SELinux has denied the samba daemon access to users' home directories. Someone
is attempting to access your home directories via your samba daemon. If you only
setup samba to share non-home directories, this probably signals an intrusion
attempt. For more information on SELinux integration with samba, look at the
samba_selinux man page. (man samba_selinux)
Allowing Access: If you want samba to share home directories you need to turn on the
samba_enable_home_dirs boolean: "setsebool -P samba_enable_home_dirs=1"
Fix Command:
setsebool -P samba_enable_home_dirs=1
Additional Information:
Source Context system_u:system_r:smbd_t:s0
Target Context unconfined_u:object_r:user_home_dir_t:s0
Target Objects /home/micah [ dir ]
Source smbd
[code]....
Fedora Security :: Prevent Firefox With SELinux?
May 11, 2009I am new to Fedora 10, and to SELinux too.
I would like to know how can I prevent from users with role user_r to connect to Internet with firefox.
Fedora Security :: SELinux Is Blocking Ipod?
Jul 8, 2009I am running Fedora 11 and every time i plug in my iPod it tells me... SELinux is preventing mkdir (podsleuth_t) "read" security_t ... I have no idea on how to create a policy module to allow access.
View 2 Replies View RelatedFedora Security :: SELinux Relabel Every 3 Boot?
Mar 29, 2010I get a SELinux relabel often even without changing stuff. SELinux troubleshoot doesn't show any error nor are there any messages in /log/messages that give any clue. Where should I look to see whats happening ?
2.6.31.12-174.2.22.fc12.x86_64
selinux-policy-3.6.32-103.fc12
Fedora Security :: SELinux Has Broken Bugzilla
Jul 19, 2010I have recently upgraded from FC12 to FC13, and last week I updated all packages using YUM. The system is running as a VM inside CentOS 5.5 using KVM. SELinux is enforcing, using the targeted policy. Bugzilla is version 3.6.1 and was NOT installed using RPM or YUM.
Bugzilla was working OK on this machine until SELinux was upgraded last week from 3.7.19-28 to 3.7.19-33, and is still broken after testing 3.7.19-37 from the testing repo. With SELinux in enforcing mode, apache returns error 500 when I browse to the main bugzilla page. The apache error log shows this:-
Code:
[Mon Jul 19 13:15:08 2010] [error] [client 192.168.40.1] (13)Permission denied: exec of '/var/www/html/bugzilla/index.cgi' failed
Nothing, and I mean absolutely nothing, is recorded in /var/log/audit/audit.log, /var/log/messages or /var/log/secure.
[Code]....
Fedora Security :: SELinux Warning On Rkhunter?
Mar 17, 2011i get this warning from selinux :
"SELinux is preventing /bin/mailx from append access on the file /var/lib/rkhunter/rkhcronlog.OmRFCZOynG."
I tried to fix it by "# /sbin/restorecon -v /var/lib/rkhunter/rkhcronlog.OmRFCZOynG" as suggested by SELinux but it comes back with another warning, but with a different /rkhcronlog.xxxxxxxxx...
i think its just a way of rkhunter logging issue -. attached here is the actual error message by selinux.
Fedora Security :: SELinux Troubleshooter Missing
Jul 20, 2011I just install Fedora 15 and I see the SELinux Policy Genertation Tool and the SELinux Administration application in the app launcher but I do not see the SELinux Troubleshooter app. I seems to be missing. How do I get it on my system?
View 2 Replies View RelatedFedora Security :: SELinux Policy Changing In 15
Jul 24, 2011I need to change SELinux policy to permissive and then back to enforced for an installation. I understand that I should be able to do that through the SELinux Administration window accessed through System -> Administration ->SELinux Management. But I do not have any real sysadmin tools available in my Fedora 15 Gnome Gui interface. Am I missing something, or should I use some sort of similar command line tool to do this?
View 2 Replies View RelatedFedora Security :: SELinux - Update Stopped Printing
Mar 6, 2009I know very little about SE Linux and I've heard that in some situations it's better to disable it. For a home user, is it important? Does it improve your life ? or does it get in the way ?
Last week some update stopped my printing and I had to install the new hplip from HP because it wasn't in the Fedora repos to correct the problem. I don't know if SELinux had anything to do with it, but today when I disabled SELinux a few minutes later I get a star up on the toolbar and when I clicked on it it mentioned something about hplip. It wouldn't make any sense to me but maybe this has happened to others.
Fedora Security :: SElinux Is Blocking My Internet Connection
Mar 15, 2009SElinux is blocking my internet connection and every time when I connect t the internet (pppoe connection) I ge message.
View 2 Replies View RelatedFedora Security :: How To Create A Totally New SELinux User
Jun 4, 2009Currently working on the targeted policy, I need a help in doing the following things as quick as possible:
1- How to create a totally new SELinux user (not mapping new linux user to SELinux user) I want a new user with no roles or with a maximum of 1 role. I also need how to compile the new user so I can used it for mapping users. At the time, I've tried creating a new file inside /etc/selinux/targeted/contexts/users similar to the other users inside this directory, but it did not actually seem to appear when using the command semanage to list SELinux users : semanage user -l
2- How to create a totally new SELinux role (empty for now) ? and how to make the relation between this new role and domains or types.
3- How to create new domain, actually following some old instructions I created the .fc and .te files, but not the .if file, which is more complicated than the other 2 file.
Fedora Security :: Restricting Xattr Flags With Selinux ?
Jul 12, 2009I've got a question about chattr command. is it possible to restrict a root access for this command. what i want is something similar to freebsd behaviour aka the kernel secure level. setting a particular security level results in limiting some operations (i.e changing immutable flags on files) by root. well, if someone gained an access to a machine in some way, nothing would stop him changing the file's flags. so the question is if it can be achieved with selinux?
View 2 Replies View RelatedFedora Security :: SELinux Stopping Dial Up Connection?
Aug 6, 2009well after spending most of the morning getting help with my internet connection hanging when I dial up we discover that SELinux is causing it so when I set it to passive I can connect so how can I get it to allow me to connect while being set to enforcing?
View 5 Replies View RelatedFedora Security :: Install Vmware - Must Disable Selinux ?
Aug 17, 2009I plan to install vmware but I had some problems...So I looked over the internet and I found that I must disable selinux....is this true? It means that I must have to disable the selinux for ever? And then, will my System be safe?
View 6 Replies View RelatedFedora Security :: SElinux Apache Upload Denied
Jun 22, 2010I want to be able to created directories and upload files (images mostly) via a php web page. The directory structure is a throwback to windows and I really really don't want to have to change it because there are so many files/links already there.
/cust/cust_name/site/version/web (all html/php files go here)
I want to be able to edit the files with a 3rd party tool (SSH based). These are small orgs, like my church, local community club, sports team, etc., so file ownership needs to sync with the editor, not apache.
[Code].....
Fedora :: SELinux Trouble Shooter About A Security Alert?
Jul 30, 2010I sue Fedora 13. Since a few times ago, every time when I start the computer, it appears a message of SELinux trouble shooter about a security alert. But most of times there are no errors to show.
View 9 Replies View Related