Fedora :: Odd Output After Selinux-policy-targeted Package Finished Updating?
Feb 20, 2010
I just updated my system via yum and got an odd output after selinux-policy-targeted package finished updating.
Code:
Updating : selinux-policy-3.6.32-89.fc12.noarch 14/80
Updating : selinux-policy-targeted-3.6.32-89.fc12.noarch 15/80
/etc/mock/koji* /etc/rc.d/init.d/dirsrv* /srv/git* /usr/autodesk/maya2010-x64/lib /usr/lib{64,}/nagios/plugins/check_mailq /usr/sbin/ns-slapd /usr/share/e16/misc* /usr/share/shorewall/compiler.pl /var/cache/cgit* /var/lib/git* /var/lib/koji* /var/www/git/gitweb.cgi /var/www/git/gitweb.cgi
Does anyone knows what that means?
View 2 Replies
ADVERTISEMENT
Jun 14, 2010
i am trying to install centos 5.5 x86_64 as a guest OS in vmware server 2.0.2 using netinstall iso. Installation runs fine until the point, when it tries to install selinux-policy-targeted-2.4.6-279.el5.noarch, the whole virtual pc hangs at this.any ideas? i tried to google few things about this, but i have found nothing. this has happened 3 times in row, whole virtual pc always hangs at the same package. i dont have any other problems with vmware, gentoo runs and installs fine in it.i would prefer to do installation using netinstall.iso, it would take a lot of time to download all cds or whole dvd and all i require is a very basic set of packages.
View 7 Replies
View Related
Jul 24, 2011
I need to change SELinux policy to permissive and then back to enforced for an installation. I understand that I should be able to do that through the SELinux Administration window accessed through System -> Administration ->SELinux Management. But I do not have any real sysadmin tools available in my Fedora 15 Gnome Gui interface. Am I missing something, or should I use some sort of similar command line tool to do this?
View 2 Replies
View Related
May 25, 2011
Tried google and searching this forum to no avail. Under Fedora 14, there is an selinux policy which blocks sshd from making outbound connections on port 80 or 443. This can occur when a client box tries to tunnel through the ssh connection for encrypted access to the web.
While I did manage to allow this happen by creating a permissive domain for sshd with this command:
Code:
The preferred way would be to allow sshd to make connection on other ports with a similar command that does not seem to work:
Code:
Is this the correct way of allowing an outbound port connection for the sshd daemon?
View 2 Replies
View Related
Nov 20, 2009
I just upgraded from 11 to 12 and then installed the Nvidia proprietary drivers from RPMFusion. Initially glxinfo wouldn't work because SELinux was stopping it from using an executable stack. Since the Nvidia drivers are proprietary and a fix may not be provided, I allowed this access to glxinfo with chcon -t execmem_exec_t '/usr/bin/glxinfo'
However it looks like every program using glx-utils also needs these permissions - so far I allowed Xorg, compiz and the Firefox video plugin to execstack. Can anyone suggest a fix for this - preferably one that avoids execstack for all those apps since its a security risk. If not how do I create an SELinux policy to automatically grant apps execstack while they use glxinfo or other nVidia libraries but not at other times.
View 2 Replies
View Related
Jun 17, 2010
I am trying to configure my live install of fedora so a PC on the same intranet can access it by hostname instead of by IP address.After I installed bind, I realized the man pages recommended against bind and said instead to enable SELinux named. I tried to guess what variables to set after googling and studying the documentation and coming up empty. I used getsebool -a, and tried turning one and all on.I test using:nslookup myhostname on the linux box, since if that is working it isnt surprising that the windows box cant see it. what buttons to push to enable SELinux named, as described in fedora 13 man page for bin slight correction, the man page is for named. It says to remove the bind-chroot and use SElinux to enable named. I think I also have to create a new zone. This seems akin to proving fermats last theorem but less rewarding. anyone know what keys to push for either. I did get system-config-selinux running. I thought it was in an infinite loop but it does *eventually* load a gui. Also if you set a boolean it will grab all CPU for a couple of minutes. (used top in another terminal).
View 5 Replies
View Related
May 10, 2011
I'm using Debian Squeeze.
When I invoke apt-cache policy , for example , apt-cache policy zlib1g.
I get the output like:
Code:
And below the line "Version table:" , there is installed package version. I assume 1:1.2.3.4.dfsg-3 is version("epoch"+"upstream version"+"debian revision"), but what does the next "0" means?
View 2 Replies
View Related
Feb 23, 2009
You can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
View 5 Replies
View Related
Aug 1, 2011
I've got Debian Sid x64 on my machine. Problem is that in my KDE setup several programs don't work, namely System Load Viewer plasmoid, plasmoid with temperature info and update-notifier-kde. System Load Viewer always shows 0% RAM and swap usage, as well as no processors, temperature sensors plasmoid shows no sensors available even after I installed lm-sensors and run sensors-detect, update-notifier-kde doesn't show any notifications even if I run aptitude update manualy. I might be mistaken but it seems to me that these three programs are not working because of some common reason, most likely some policy package either missing or misconfigured, but I can't figure out what is it.
View 4 Replies
View Related
Jan 17, 2010
When I run the "dmidecode" command on a FC 12 system with a relatively new motherboard, I notice that its report about the motherboard hardware says "Targeted content distribution is supported".
What is "Targeted content distribution" ?
View 3 Replies
View Related
Jan 25, 2010
I'm writing a couple of programs in C and need to do something to formatting the output. I'm after producing something like a old mainframe screen or early micro where you could PRINT (x,y) to put something on the terminal where you want it. Learning GTK or such is not an option due to time constraints, and some fields need updating frequently during processing, so letting the terminal scroll is going to drive the operator up the wall pretty quickly.
View 2 Replies
View Related
Dec 22, 2010
i just installed skype after downloading it from the officail site fedora package installation went smooth with no errors but after finnished i click to start skype nothing happens
View 7 Replies
View Related
Sep 1, 2011
I wanted to install Matlab2011 in fedora15 and i receive this following: Preparing installation files Installing ./install: line 589: /tmp/mathworks_2110/java/jre/glnxa64/jre/bin/java: Permission denied Finished. I think the problem was Java, but I updated java and still is not working.
View 1 Replies
View Related
Feb 26, 2010
What does this message mean? Can't KDE be updated at all or is it just this swedish dictionary?
PackageKit Error cannot-remove-system-package: Subprocess failed. Error: RPM failed: error: rpmdbNextIterator: skipping h# 1022 Header V3 RSA/SHA256 signature: BAD, key ID 3dbdc284 error: package kde4-l10n-sv-doc-4.3.1-2.4.noarch is not installed
Whats the remedy? "Totally new to Open Suse".
View 7 Replies
View Related
Jul 16, 2011
OpenSUSE 11.4, 64 bits, with
Index of /repositories/KDE:/Release:/46/openSUSE_11.4
and
Index of /repositories/KDE:/Extra/KDE_Release_46_openSUSE_11.4
repositories enabled. Since some days, if I go to YaST2 †’ Package †’ "Update packages if a new version is available" (I'm translating from Spanish) I get a warning that plasma-addons-4.6.5-9.3.x86_64 needs akonadi-runtime < 1.5.40, but that that requirement cannot be match because there are eliminated providers: akonadi-runtime-1.5.3-91.1.x86_64
and non instalable providers: akonadi-runtime-1.5.0-3.3.1.x86_64[openSUSE-11.4-11.4-0]
As "solution" it offers me to not install akonadi-runtime-1.6.0.93.1.x86_64 and libakonadiprotocolinternals1-1.6.0.93.1.x86_64 (which I selected) or to uninstall plasma-addons and kadressbook, which I do not think it is a good idea...
View 7 Replies
View Related
Dec 23, 2009
Is it possible to set a package in such a way that it will not update when "yum update" is executed?
View 1 Replies
View Related
Oct 11, 2010
So i have a small home server i need to setup. I used to have arch linux installed, but i found it unstable and more difficult to maintain. So i heard about the stability if CentOS and decided to try it out. I got samba setup no problem, but cups i cannot get to work. The orinter driver for my epson workforce 500 requires lsb 3.2 whereas lsb installed in centos is only 3.1. What can i do to fix this? Should i just go with fedora instead?
View 8 Replies
View Related
Aug 18, 2011
Was wondering if someone could suggest a reference and possible approach to troubleshooting openSUSE update. I'd always assumed that the openSUSE update (applet) would notify me and update any apps installed from any of the configured repositories.This week I found two applications were not detected and updated, one from the Pacman repository where an update was available for more than 2 weeks and another from the Contrib repository where an update was available for an unknown amount of time.I manually detected and updated both using zypper without any special repository configuration.The SUSE updater has been running regularly installing critical and recommended patches regularly without issue.Am considering
- Maybe somewhere there is a config specifying repositories and/or apps? I can't seem to find something that's applicable.
- Maybe I misunderstood that the SUSE updater isn't supposed to update anything from non-OSS repositories?
View 9 Replies
View Related
Jun 14, 2010
Following are the error details..
W: GPG error: http://ppa.launchpad.net jaunty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY C174A7B143CBFCC0
W: GPG error: http://ppa.launchpad.net jaunty Release: The following signatures couldn't be verified because the public key is not available: NO_PUBKEY CE90D8983E731F79
View 3 Replies
View Related
Dec 3, 2010
I'm experiencing a strange issue with my Ubuntu 10.10 since a few days:when trying to update the packages list, a lot of repositories are ignored.Here is the output of
Code:
sudo apt-get update | grep -i ign
.
Quote:
Ign http://extras.ubuntu.com/ubuntu/ maverick/main Translation-en
Ign http://extras.ubuntu.com/ubuntu/ maverick/main Translation-en_GB[code]....
How come all these repositories cannot be hit?is there any way to make the update hit there repositories? And if they're useless, no longer supported, how can I remove them so to have a tidy repositories list?
View 3 Replies
View Related
Sep 14, 2010
When I select package updater for update software it gives an error I am attached my system information & error file.
Error message:-
file /usr/share/emacs/site-lisp/psvn.el from install of subversion-1.6.12-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5_3.1.i386
file /usr/share/locale/de/LC_MESSAGES/subversion.mo from install of subversion-1.6.12-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5_3.1.i386
file /usr/share/locale/es/LC_MESSAGES/subversion.mo from install of subversion-1.6.12-0.1.el5.rf.x86_64 conflicts with file from package subversion-1.4.2-4.el5_3.1.i386 .....
View 3 Replies
View Related
Feb 8, 2011
I have finished reconfiguring my 1st PC Centos 5.5 with Squid and Dansguarian. Works fine the configuration is basic.lets name it to 1st PCeth0 - modem ip (public)eth1 - 172.16.1.1 (LAN)Then I've decided to change and add another Centos 5.5 for Firewall Service that is directly connected to the modem and then shares internet connection and some ports to 1st PC.
lets name it to 2nd PC, it also has two NICSeth0 - modem ip (public)eth1 - 10.0.0.1 (ip to connect to the 1st pc with squid services)so I changed the ip of the 1st PC with theseeth0 - 10.0.0.2eth1 - 172.16.1.1 (LAN)and connects the eth0 (10.0.0.2) of the 1st PC to the eth2 (10.0.0.1) of the 2nd PCthen I've tried browsing on the network but it does not work...is there a simple iptables command for the 1st PC and 2nd PC?ere are the iptables script and lists of my 1st and 2nd PC 2nd PC (firewall to be)
#vi /home/user1/fw.sh
#!/bin/sh
123=/sbin/iptables
[code]....
View 7 Replies
View Related
Feb 1, 2010
I have in /etc/selinux/config:
Code:
SELINUX=enforcing
SELINUXTYPE=mls
Do I have MLS enabled? I can't use Selinux commands. I thought MLS is sort of package to Selinux. I fallowed this:
Code:
[code].....
View 3 Replies
View Related
Sep 9, 2010
ok the new version of soundkonverter in maverick seems to me lame beyond belief so i want to hang on to the soundkonverter.3.8 version which was on lucid so i have installed it..MY QUESTION IS is there a way to never have update manager trying to update it unclicking it every time i want to do my weekly update with update manager could be a massive pain in the rear.
View 4 Replies
View Related
Aug 24, 2009
It took me a while to get VNC going. It was easier with FC8-10. Once I got finished and was actually able to log in and see my remote desktop I tried to add some software... virtualbox.When I double click on the RPM I get popup that states."The action could not be completed. Failed to install file. You do not have the necessary privileges to perform this action" When I close that dialogue another one pops up that states" "The action could not be completed." When I click on more details the dialogue states. "Policykit authorization failure" How can I make this work?
View 1 Replies
View Related
Jan 5, 2010
FC12 with recent updates The bugzilla I reported is fixed in selinux 3.6.32-66 and I have 3.6.32-56. I refreshed the repositories and looked for 66 and it is not listed. Question - how often does the policy changes get posted to the repositories ? And are the repositories the normal place to get the latest and greatest ?
View 2 Replies
View Related
Feb 17, 2010
This is what happens when i try to update "accessing the package manager faild" "system manager is locked by the application with pus 10464 (/user/sbin/packagekitd).
View 1 Replies
View Related
Jan 17, 2011
I'm running into some problems setting up Tor on Fedora 14. I have followed the following guide to a T (although I realize it is for Fedora 10):orum.org/showthread.php?t=211516.I believe the problem is SELinux... but I'm not sure. Has anyone had any success running Tor in Fedora 14 without it bugging out? If not, is there some sort of Unix alternative?
View 12 Replies
View Related
Jul 18, 2009
How can I solve the problem?
View 1 Replies
View Related
Jan 18, 2010
There are several options available, such as "Ignore Alert" and "Turn off memory protection". What are the consequences of choosing one or the other?I'm new to Fedora and I'm not familiar with SELinux. Can someone please give me guidelines (or explanation) on how to deal with SELinux alerts?
View 7 Replies
View Related
