Why do I have an empty directory in the top of my filesystem labeled "cgroup" that goes by the file context above?And why does it apply to all files "/cgroup(/.*)?" as per a fcontext search?Did something break or is this the result of a new update?
View 2 RepliesI receive messages such as the below:
SELinux is preventing /usr/sbin/httpd from using potentially mislabeled filesjk-runtime-status. SELinux has denied the httpd access to potentially mislabeled filesjk-runtime-status. This means that SELinux will not allow httpd to use these files. If httpd should be allowed this access to these files you should change the file context to one of the following types, httpd_tmp_t,
I know how to change the owner of a file and the permissions but what does it mean to change the file context?
I'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
After entering the gdm I'm being asked "Would you like to enter a Security Context [N]?" during login. I've had a look around online but can find nothing final about this.
View 1 Replies View RelatedI'm suspicious that the context of /etc/sudoers is wrong. During the last upgrade to Fedora 14, RPM dropped /etc/sudoers.rpmnew, which had a different context than the real sudoers file. But, when I try to get SELinux to relabel the file (using restorecon or fixfiles), it refuses to make a change.
> ls -lZ /etc/sudoers
-r--r-----. root root unconfined_u:object_r:etc_t:s0 /etc/sudoers
> matchpathcon /etc/sudoers
[code]....
I have fedora 10 and it has been working fine for over 6 months. Today I did the system update. After the update, I rebooted the system. Now, it hangs displaying the message "Not cloning cgroup for unused subsystem ns".
View 9 Replies View RelatedI get the following error whenever I launch bash:
Code:
mkdir: cannot create directory `/dev/cgroup/cpu/user/5900': No such file or directory
bash: /dev/cgroup/cpu/user/5900/tasks: No such file or directory
bash: /dev/cgroup/cpu/user/5900/notify_on_release: No such file or directory
It seems like it's probably from this part of .bashrc:
[Code]...
What does this code do, why, and what's causing it to go wrong?
Is there a way I can change the security context of only the directories, & only files, recursively, in bash?
View 11 Replies View RelatedI reset the security context for my cgi-bin to httpd_sys_content_t.How do I set it back to the proper context?
View 1 Replies View RelatedWhat are the SElinux security context type & booleans in FTP/vsftpd
View 3 Replies View RelatedI try to install IPsec-Tools on Slackware 13, but I get an configure error: configure: error: Security Context requested, bu no selinux support! Aborting. I'm linux newbie and I'm following a slackware-basics tutorial, I did as in the tutorial, but the configure stops and aborts:
Code:
# CFLAGS="-O2 -march=i486 -mcpu=i686"
./configure --prefix=/usr
--sysconfdir=/etc
--localstatedir=/var
[Code]...
What can I do? How can I enable/install selinux support? I guess it's related with AH and ESP protocols, which in my kernel are defined as modules (m). If so, how can I enable them?
Here what I want to achieve. I have iso file images that I do not want to expand permanently via /etc/fstab, but instead via autofs. Then I want them to be exposed by HTTP and FTP. I am using CentOS 5.5 and below are the relevant part of configuration files.
/etc/auto.master:
/expanded /etc/auto.iso --ghost
/etc/auto.iso:
centos -fstype=iso9660,loop,ro,context=system_ubject_rublic_content_t:s0 :/isofiles/CentOS-5.5-i386-LiveDVD.iso
[code]....
I need a definiton of what a symbol is in (symbol table) and or object file context.
View 4 Replies View Relatedwhen i type this command chcon -t samba_share_t /common
error came chcon: can't applypartial context to unlabeled file /common what type of problem is this?
The script "vsftpd_virtualuser_add.sh" from the guide here:
http://wiki.centos.org/HowTos/Chroot_Vsftpd_with_non-system_users
executes the following line: /usr/bin/chcon -t public_content_rw_t $HOMEDIR/$USERNAME
which returns the error: /usr/bin/chcon: couldn't compute security context from unlabeled
Login attempts are unsuccessful on the given username.I followed the instructions on that page verbatim.I can't find anything useful on that error anywhere - even outside of vsftpd context.This is a new CentOS 5.5 server - updated everything with yum.VSFTP worked fine on the last server, which was a CentOS 5.x.
ive played around with cpusets and now have some processes that cant be moved to the main group /dev/cgroup/tasks. echo pidinquestion >/dev/cgroup/tasks results in:
bash: echo: write error: Invalid argument. how can i move these tasks? or remove the process group alltogether, rm -r is not working. permission denied?
I tried this : [URL].. Compiled my kernel with all cgroups options, but /sys/fs/cgroup/cpu, and i can't mkdir it.
View 14 Replies View RelatedIt is. I think this might be the reason why my $wireless objects don't work in Conky?
View 4 Replies View RelatedI have a 1.5TB hard drive that was initially set up on a Solaris 10 x86 host system. Due to the large device size, Solaris labeled the disk with an EFI (GPT) label instead of the traditional SMI (VTOC) label when it was partitioned. 4 slices are defined in the GPT: root (128 MB), swap (128 MB), usr (1.4 TB) and reserved (8 MB). A standard Solaris UFS filesystem was created on the 1.4TB usr slice.
I have now physically removed the hard drive from the solaris system and have installed it in an Ubuntu 9.10 system. I have no trouble mounting regular Solaris UFS filesystems on SMI-labeled drives:
Code:
# mount -v -r -t ufs -o ufstype=sunx86 /dev/sdb1 /mnt
However for EFI-labeled drives such as the one I described above, there are multiple issues.
1. Ubuntu believes the GPT is incorrect, as witnessed by these syslog messages:
Code:
kernel: [ 2.559777] scsi 4:1:6:0: Direct-Access ST31500341AS CC1H PQ: 0 ANSI: 5
kernel: [ 2.600193] sd 4:1:6:0: Attached scsi generic sg11 type 0
[code]....
Notice how Ubuntu is not recognizing or reporting the Solaris ufs filesystem on sde7.
2: the UFS filesystem is not mountable.
Code:
# mount -v -r -t ufs -o ufstype=sunx86 /dev/sde7 /mnt
mount: wrong fs type, bad option, bad superblock on /dev/sde7,
missing codepage or helper program, or other error
[code]....
I have been working with ssh for a long time without problems but suddenly, without any changes to the configuration, I am facing problems. When I try to login I get the following message and the connection is closed:
Code:
Unable to get valid context for tanwald
I ran SELinux in permissive mode and found the following logs:
[code]....
Before doing a clonezilla project I opened Disk utility shows the first partition labeled as sdb2, then second partition as sdb1is this normal? I will add that this is a windows drive, but I wanted to back it up before installing debian to it. How will the disk partition labeling affect partition naming in debian?
View 2 Replies View RelatedI looked for a little and everyone's problem similar to this it seems they are tunnelling for a vnc server of some sort. I am just running ssh and it fails not only from the machine, but also remotely. The username "lee" is in group "sshusers"I have two machines setup the same, as to my knowledge. In one server I can access ssh and everything works well but when I try to ssh into the other one it gives me this
Code:
[lee@localhost ~]$ ssh -p5912 192.168.1.63
lee@192.168.1.63's password:
[code]....
I have special permission from the management to stimulate my colleagues to learn Linux - er, Fedora. So I'm dual booting a few machines for them to toy around with. However, all of the popular things of course have to work easily, otherwise there's no convincing them..Almost everything has been arranged, except for an easy way to bulk-print pictures onto A4. I have probably missed it but google doesn't help, this forum doesn't give me too much that I can find.
I did find gpp (Gnome Photo Print) but that is still too complicated. I need to be able to either get it directly from the nautilus context menu, or set the gui so that this app is automatically used when viewing images in a memory card. And then it has to be easy to print.
nautilus menu bar missing> for many programs restarted compiz,disabled & enabled desktop effects gnome- applet-globalmenu is installed.Please tell me step by step method to solve it, if its complex.i am managing it with --> add to panel --> deskbar which displays relevant menu in the bar.can you please reply me a standard gconfig preference details from apps section.
View 1 Replies View RelatedI just updated my system, not sure which package may have caused this, here are the outputs:
Mutter:
Code:
(mutter:4637): Clutter-CRITICAL **: Unable to initialize Clutter: Unable to select the newly created GLX context
Window manager error: Unable to initialize Clutter.
Compiz:
[Code]...
Anyone else seeing Dolphin's Context Menu on a file, Actions -> Preview This File not working for them?
Does anyone know how to fix it to work?
I am using openSUSE KDE 4.
In Windows Explorer, if a file is focused, press Menu Key on keyboard, context menu will show on top of the file. But in Nautilus, the same action shows context menu where the mouse cursor is. That's a bit annoying. Is there anyway to make it work like Windows?
View 1 Replies View RelatedI can start "Search for files" from menu
Applications->Accessories->Search for files....
and it works fine.
However I would like to put it into the context menu of the Nautilus File Browser.
When I select it e.g. for folder /home/peter
then the start base directory should be obviously set AUTOMATICALLY to /home/peter
I'd like show a certain line or lines of a file with context, kind of like a unified diff, on the command line in Linux:
$ (something) -l 154 stuff.py
150: def foo(bar):
151: """
[code]....
I'm working with Fedora and SELinux and am having a problem. I need to allow apache's http daemon to use arp (for getting some mac addresses). I have changed the type of the arp executable to httpd_sys_context_t but am still having an issue. Here is the messages log: Detailed Description:
[Code]...