General :: What Is Difference Of Firewall And Selinux
Jan 21, 2010
I doubt what 's difference of firewall and selinux. As far as I know... Firewall is security software for block unauthorized others connection. selinux is Linux-based security software.
I've just installed Fedora 12 (32 bit) KDE on my test system and have a couple of issues.I haven't played with Fedora for a couple of years, so I'm not very familiar with it. I haven't had the problems with Kubuntu, OpenSUSE nor Mandriva, so I'm a bit in the dark here. I'll see if someone can help me with my sound issue, before moving on to the next problem. I've read seveal posts about sound issues, but not sure exactly if any are the same as I'm having.
After installing Fedora 12, sound was all working fine. I think installed all the available updates, which is when the problem began. Basically, I have sound in Hulu, Firefox videos such as CNN, etc. But, I have no sound at startup or shutdown....system sounds, I suppose I should say. I have disabled SELinux and the firewall, before I began updates. Looking in KInfoCenter under Audio, I see:
Audio Devices: NOT ENABLED IN CONF VIA8247 with ALC655 at 0xc400 IRQ11 In System Settings>Multimedia I see Internal Audio Analog Stereo as the only device shown. I have unchecked Mute and have all volume controls up all the way in KMix, which shows HDA Nvidia on the tab.
I have installed the graphic user interface for IPtables and enabled this firewall. However, I find it a bit strange. What is the difference between rejecting and denying the traffic? If I want to configure IPtables as two-way, how can I define which of my apps can connect to the internet and which can't? If this firewall is enabled, does it really run in the background, protecting the user,or does it run only when its GUI is opened?
I'm using CentOS 5.3, and I want to allow my samba server from selinux. I disabled my selinux and it works fine, but I want to keep my seline firewall on and want to allow other workstation to access my samba server.
You can find a list of all the booleans for SELinux (Fedora 10) using getsebool -a My question is, is there a reference online that describes each one. Most of obvious but it's one of those "I have to know because it's there situation).
I suspect this is an initial configuration bug. All firewall logs seem to be going to all three files. That causes a lot of clutter in the log files, and makes it difficult to see whether there are any serious problems being logged.
I am learning to setup firewall in my home for that i have selected four system(sys1,sys2....sys4) for testing .I have configured sys2 to act as a firewall with two NIC. sys3 and sys4 are inside the firewall . sys1 is not connected to firewall for testing purpose.
the IP assignments are follows :
sys1 : ( fedora, not connected to firewall i am thinking, But i am not sure )
what happened is that sys1(not connected to firewall) can ssh to sys4(connected,inside firewall),since the rules are written not to ssh form sys1 to sys4..
then I came to know whatever the request I give, It directly goes as sys1 --> sys4. Not as sys1-----> sys2(firewall)---> sys4 .and the firewall is not filtering and processing anything for both inbound and outbound (i think it's my mistake some where). the requests are directly going inside without firewall.
I'm trying to build firewall on Debian with 'Firewall Builder'. But it won't let me compile and run unless one interface is set as management. There are two interfaces on my computer: 'eth0' and 'lo'
I don't want to be able to configure firewall remotely, so could I use 'lo' as 'management interface'?
** Warning -- SELinux relabel is required. *** *** Disabling security enforcement. *** *** Relabeling could take a very long time, *** *** depending on file system size. ***
On the next screen the boot hangs. There is a solution posted here: [URL] it states I booted my VM from a rescue CD ISO, mounted the root directory, and:
# cd /mnt/local # rm -f .autorelabel
Once this is done you may want to consider upgrading your VM to more -current that has this fixed. I've booted using a knoppix CD, but I don't know how to mount the root directory to try the fix.
I'm in the process of setting up a new Debian box as a web server. I had apache2 and mysql set up and all of the SSl taken care of. After installing selinux I noticed that my browser and ftp in the terminal wont connect to localhost, other computers on my network can connect to the apache server via a global ip, but it wasn't pulling database info. When I checked, I found that mysql was stopped. When I try to start it, it times out.
After some googling and trying a bunch of setsebools I finally just disabled selinux in /etc/selinux/config. I rebooted and confirmed selinux was disabled, but still the same issues. If it helps the error php throws when trying to connect to mysql is "can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)"
What if two programs say ftpd and httpd need to acces the same directory? Any way to set context type of that directory to httpd_t and ftpd_t? What do you do in a case like this?
I configured DNS in my server while That time SELINUX enabled means It show permission denied error and some errors, but i checked all the directory permissions and all its every thing correct only but not worked..At last I just disabled the SELINUX then its working fine.I Heard SELINUX is for security for Linux operating systems, but why i disabled means only its working??
I accidently reset the SELINUX context on the /var folder from "var_t" to user data. Now I cant go back and set it to "var_t" and i cant access my website anymore
I try to install IPsec-Tools on Slackware 13, but I get an configure error: configure: error: Security Context requested, bu no selinux support! Aborting. I'm linux newbie and I'm following a slackware-basics tutorial, I did as in the tutorial, but the configure stops and aborts:
[Code]... What can I do? How can I enable/install selinux support? I guess it's related with AH and ESP protocols, which in my kernel are defined as modules (m). If so, how can I enable them?
i have dual OS in my hard disk. win xp and rhel5. i used use ntfs partition too while working in linux. There is no problem until i enable selinux. When i enabled that, its giving some error at startup and left the partition unmounted. But manually i can mount after logged in. But i need it at the startup itself. How to solve this.i am installed dkms* dkms-fuse* fuse* and fuse-ntfs-3g* rpms to use the ntfs partitions.
The 3.4G is correct because we have removed all non essential file but free space reported by df is not consistent with the actual free space that should be there.
I need to know the exact difference between SCP and SSH can somebody explain please as i am confused as both seem to do the same thing if so let me know what the difference is.