Fedora Security :: Mouse Pointer Locks In SELinux Sandbox Window?
May 29, 2011
Running firefox in a SELinux sandbox - periodically the mouse refuses to leave the sandbox (i.e., gets stuck in the browser, refusing to traverse across the window border onto the desktop). This usually happens once in a while, though periodically once every 15 mins or so - no particular pattern, no pattern in the websites visited either.
The setup is as follows:
- Fedora 15 with a bare metal X install (TWM, desktop locked down ala a kiosk install - I will try a different wm to see if that makes any difference at some point)
- VPN (having been through a few VPN providers not all are equal, and this is a pretty good one, running OpenVPN at the mo. - I will try L2TP when I get round to it)
- Firewall locked down to the max.
- As far as reasonably can be done, no direct access to the machine - the install at least in theory is untainted
Does anyone know of a SELinux forum? Can't see anything myself or at least in the first instance.
I'm assuming this is a MITM problem - largely 'cos I have crime sitting on my (Internet) ass. Same problem with SL6 also, so not Fedora specific. I shall put the security spin into a VM and develop my network engineer skills at some point!
View 2 Replies
ADVERTISEMENT
Oct 21, 2010
i have ubuntu 10.10 netbook edition but im running the desktop edition and i was recently trying to use compiz but it didnt work so i uninstalled it.. then after rebooting, no apps have window borders and my cursor changed to an x.. when i press alt i can move the windows..
View 1 Replies
View Related
Feb 23, 2011
I'm relatively new to Ubuntu and I have a question. I have compiz config settings manager and I did some changes there but I've noticed now that for example when a skype chat window is open and when I move my mouse pointer away, the window disappears. It's not exactly like disappearing cause when I hover over the window, it shows itself but it's pretty annoying ;/ I've changed so many settings but no result
View 1 Replies
View Related
Aug 19, 2010
I've snort_inline2.4.5 and didn't found snort rules-snapshot-2.4.5.tar.gz at snort home what i do
View 2 Replies
View Related
Aug 10, 2010
The only way I know is to use exit command to come out.
Is there some way to close the Xterm windows using the GUI (the mouse pointer)? Killing a lot of windows would be easier that way.
I am using Tiny Window Manager.
View 2 Replies
View Related
Apr 12, 2011
My machine, running FC13, is accessed by a NX client / server (freenx-server.i686 package installed). Using the NoMachine NX client, when I launch the sandbox program (policycoreutils-sandbox.i686 package), for example,sandbox -X xtermthe process dies without displaying a screen. The problem comes from the Xephyr server that complains : 'Xephyr cannot open host display. Is DISPLAY set ?'. Xephyr is called in the bash file /usr/share/sandbox/sandboxX.sh by:/usr/bin/Xephyr -title "$TITLE" -terminate -screen $SCREENSIZE -displayfd 5 5>&1Is there a way to solve this problem ?
View 2 Replies
View Related
Jul 9, 2010
I'm running FC12 and GNOME.If I move the physical mouse about one inch, the mouse pointer moves across the entire screen.That's way too fast and way to sensitive.I prefer the mouse pointer to move far less distance on the screen when the physical mouse is moved.
From System->Preferences->Mouse, I set the various mouse Pointer Speed acceleration and Sensitivity to Slow, Fast, Low, High, and and I couldn't get it any better. At the least sensitive settings. if I move the physical mouse one inch, the mouse pointer moves across the entire screen.How can make the mouse pointer less sensitive to mouse movements?
View 14 Replies
View Related
Jul 29, 2010
one of the coolest features of Fedora imho is sandbox -X, which I used extensively in F12. However, in F13 I yum install /usr/sbin/seunshare prints:
Code:
[...]--> Processing Dependency: policycoreutils-python = 2.0.82-13.fc13 for package: policycoreutils-sandbox-2.0.82-13.fc13.x86_64
--> Finished Dependency Resolution
Error: Package: policycoreutils-sandbox-2.0.82-13.fc13.x86_64 (fedora)
Requires: policycoreutils-python = 2.0.82-13.fc13
[Code]....
View 6 Replies
View Related
Sep 30, 2010
I downloaded Fedora 13 (x86_64) just two or three days ago, and installed it in VMWare Workstation. The problem that I am having is that the OS will randomly think that I am holding down the left mouse button, which I am clearly not. I only installed the base system (development pack), and did not add any of ther other repositories. I would really like to be able to use Fedora 13, and not just have it sitting there on my HDD, and also use it as a server operating system (because of the configuration tools)
View 3 Replies
View Related
Apr 13, 2011
this is the allert i got:Code:Summary:Your system may be seriously compromised! /usr/sbin/NetworkManager tried to loada kernel module.Detailed Description:SELinux has prevented NetworkManager from loading a kernel module. All confinedprograms that need to load kernel modules should have already had policy writtenfor them. If a compromised application tries to modify the kernel this AVC willbe generated. This is a serious issue.Your system may very well be compromised.Allowing Access:Contact your security administrator and report this issue.Additional Information:
Source Context system_u:system_r:NetworkManager_t:s0
Target Context system_u:system_r:NetworkManager_t:s0
Target Objects None [ capability ]
[code]....
View 5 Replies
View Related
Jul 15, 2010
I'm running 12, not 11. I don't know why I had 11 in my head. Can this be moved BACK from EOL? If not, I'll start a new thread. Sorry. My wife and I have matching HP EliteBook 8730w "mobile workstations" (laptops that need a donkey to move them). We also have matching LG second screens. Unfortunately, we have matching mouse pointer issues too, as you might expect.
99% of the time we work away without issue. 1% of the time, Fedora suddenly stops showing the mouse pointer in the separate LG screen. The pointer is there, you can use it (if you can guess where the hell it is!) but you can't see it. Only a reboot seems to solve the problem.
It's worth noting xorg.conf is not being used. It's an nVidia card in these laptops and I tried the latest drivers from them - they totally wiped out the display, I mean total FAIL, unusable. Had to boot up in without GNOME, run level 3, to fix it. After much messing around, I think I used the FirstAidKit plugin for xserver to repair things. Since then there is no xorg.conf:
[Code]....
If I restore *any* xorg.conf file it all goes wrong again, so I'm guessing there are either some defaults at play or there's another system currently managing my display. Either way, restoring/editing xorg.conf won't help me with the current set-up.
View 8 Replies
View Related
Jun 12, 2011
When I try to run a program of SELinux doesn't appear any window. What can I do?
View 11 Replies
View Related
Jul 2, 2010
I just booted up my old notebook with Fedora 13 + lxde live CD. However, at the desktop screen, the mouse pointer disappeared. How can I get it back?
My notebook info: Fujitsu S6220.
View 4 Replies
View Related
Oct 5, 2010
I just installed Ubuntu 10.10 on my HP Pavilion a320n computer with a ps2 mouse and the mouse pointer points with the bottom of the mouse and not the upper tip of the point. It does the same thing with Ubuntu 10.04.1. In Windows 7 and XP the mouse is normal. I don't know how I could adjust it or is this just a bug in the OS?
View 11 Replies
View Related
Mar 24, 2009
I installed FC10 but can not see mouse pointer (it was so also during the installation process). Mouse is working, Crtl shows pointer's position, moving over sensitive areas activates them but no pointer can be seen. The Mouser Property Tool doesn't show the part for selecting pointer themes (as given in Help). FC9 on the same computer worked ok, FC10 on other computers work ok, too.
View 8 Replies
View Related
Sep 9, 2009
I have installed Fedora 10. During installation itselt the mouse pointer is invisible. After installation, I rebooted system. Still it remains invisible. I am new user of Fedora. My mother board is Mercury PVM7 and P IV processor 3.06 GHz
View 4 Replies
View Related
Feb 19, 2011
Not Fedora-specific, but I couldn't think of any other place to ask. So.
Is there a way to make the desktop "continuous" so that my mouse pointer would reappear on the other side of the desktop if I move it over the edge? I sometimes find it a little frustrating to have to go from one edge to the other on a multi-monitor setup, and there are a few other reasons why I would rather have it like that.
View 1 Replies
View Related
May 4, 2011
I want to make a sandbox for my music streaming server(subsonic). I was going to make a directory and chroot to it. I don't really have any room on my HD for new partitions. For the sandbox/chroot jail to be proper does it need to be on a seperate filesystem/mount point?
View 1 Replies
View Related
Oct 20, 2010
I'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
View 3 Replies
View Related
Nov 10, 2010
Trying to keep selinux enabled. When I start SeLinux Troubleshooter from the menu, which is inautostart as well, It tells me SELinux not enabled, sealert will not run on nonSELinus systems".How do I get SELinux permanently started then
View 10 Replies
View Related
Jan 17, 2011
My newly installed Fedora-14 (64-bit) has SELinux disabled. I can't find any way to enable it. I tried to set it manually in /etc/selinux/config to enforcing or permissive but nothing happens after reboot. In GUI configuration tool it is set to disabled and grayed out so that there is no way to enable it there. Is there another way to enable SELinux?
View 11 Replies
View Related
Apr 30, 2011
I tried to log in to my xguest account and it asked for a password, which it shouldn't, so there's a problem with SELinux.When I type getenforce it says it is disabled, yet when I go to /etc/selinux and look at the config, it is in enforcing mode and not commented out, type is strict.When I go to the SELinux management GUI I can't change the current enforcing mode and it's set to disabled and default to enforcing.
View 2 Replies
View Related
May 11, 2009
I am new to Fedora 10, and to SELinux too.
I would like to know how can I prevent from users with role user_r to connect to Internet with firefox.
View 2 Replies
View Related
Jul 8, 2009
I am running Fedora 11 and every time i plug in my iPod it tells me... SELinux is preventing mkdir (podsleuth_t) "read" security_t ... I have no idea on how to create a policy module to allow access.
View 2 Replies
View Related
Mar 29, 2010
I get a SELinux relabel often even without changing stuff. SELinux troubleshoot doesn't show any error nor are there any messages in /log/messages that give any clue. Where should I look to see whats happening ?
2.6.31.12-174.2.22.fc12.x86_64
selinux-policy-3.6.32-103.fc12
View 2 Replies
View Related
Jul 11, 2010
I wonder if SELinux really are necessary for a home desktop ?
It only makes my computer use more problematic than it already is.
What can happend if I uninstall it on my Fedora 13 dist ?
Is the hole Internet going to come in to my computer and destroy it ?
If I uninstall SELinux, is the firewall uninstalled also ?
View 14 Replies
View Related
Jul 19, 2010
I have recently upgraded from FC12 to FC13, and last week I updated all packages using YUM. The system is running as a VM inside CentOS 5.5 using KVM. SELinux is enforcing, using the targeted policy. Bugzilla is version 3.6.1 and was NOT installed using RPM or YUM.
Bugzilla was working OK on this machine until SELinux was upgraded last week from 3.7.19-28 to 3.7.19-33, and is still broken after testing 3.7.19-37 from the testing repo. With SELinux in enforcing mode, apache returns error 500 when I browse to the main bugzilla page. The apache error log shows this:-
Code:
[Mon Jul 19 13:15:08 2010] [error] [client 192.168.40.1] (13)Permission denied: exec of '/var/www/html/bugzilla/index.cgi' failed
Nothing, and I mean absolutely nothing, is recorded in /var/log/audit/audit.log, /var/log/messages or /var/log/secure.
[Code]....
View 5 Replies
View Related
Mar 17, 2011
i get this warning from selinux :
"SELinux is preventing /bin/mailx from append access on the file /var/lib/rkhunter/rkhcronlog.OmRFCZOynG."
I tried to fix it by "# /sbin/restorecon -v /var/lib/rkhunter/rkhcronlog.OmRFCZOynG" as suggested by SELinux but it comes back with another warning, but with a different /rkhcronlog.xxxxxxxxx...
i think its just a way of rkhunter logging issue -. attached here is the actual error message by selinux.
View 6 Replies
View Related
Jul 20, 2011
I just install Fedora 15 and I see the SELinux Policy Genertation Tool and the SELinux Administration application in the app launcher but I do not see the SELinux Troubleshooter app. I seems to be missing. How do I get it on my system?
View 2 Replies
View Related
Jul 24, 2011
I need to change SELinux policy to permissive and then back to enforced for an installation. I understand that I should be able to do that through the SELinux Administration window accessed through System -> Administration ->SELinux Management. But I do not have any real sysadmin tools available in my Fedora 15 Gnome Gui interface. Am I missing something, or should I use some sort of similar command line tool to do this?
View 2 Replies
View Related