Server :: Reset Security Context For Cgi-bin By Mistake?
Feb 9, 2011I reset the security context for my cgi-bin to httpd_sys_content_t.How do I set it back to the proper context?
View 1 RepliesI reset the security context for my cgi-bin to httpd_sys_content_t.How do I set it back to the proper context?
View 1 RepliesI accidently reset the SELINUX context on the /var folder from "var_t" to user data. Now I cant go back and set it to "var_t" and i cant access my website anymore
View 3 Replies View RelatedI'm attempting to get MapServer running on my Fedora 13 computer. I was able to install with the package manager, and the executable (mapserv) was originally placed in /usr/sbin. But I need it in /var/www/cgi-bin to work on the webserver. So I copied the file to the right location. Unfortunately, it doesn't have the correct SELinux context. Here's the message from the troubleshooter:
SELinux denied access requested by /var/www/cgi-bin/mapserv. /var/www/cgi-bin/mapserv is mislabeled. /var/www/cgi-bin/mapserv default type is httpd_sys_script_exec_t, but its current type is httpd_sys_script_exec_t. Changing this file back to the default type, may fix your problem.
How's that for circular logic? Does anyone have an idea what the correct SELinux context for a cgi-bin executable might be?
After entering the gdm I'm being asked "Would you like to enter a Security Context [N]?" during login. I've had a look around online but can find nothing final about this.
View 1 Replies View RelatedIs there a way I can change the security context of only the directories, & only files, recursively, in bash?
View 11 Replies View RelatedI'm suspicious that the context of /etc/sudoers is wrong. During the last upgrade to Fedora 14, RPM dropped /etc/sudoers.rpmnew, which had a different context than the real sudoers file. But, when I try to get SELinux to relabel the file (using restorecon or fixfiles), it refuses to make a change.
> ls -lZ /etc/sudoers
-r--r-----. root root unconfined_u:object_r:etc_t:s0 /etc/sudoers
> matchpathcon /etc/sudoers
[code]....
I receive messages such as the below:
SELinux is preventing /usr/sbin/httpd from using potentially mislabeled filesjk-runtime-status. SELinux has denied the httpd access to potentially mislabeled filesjk-runtime-status. This means that SELinux will not allow httpd to use these files. If httpd should be allowed this access to these files you should change the file context to one of the following types, httpd_tmp_t,
I know how to change the owner of a file and the permissions but what does it mean to change the file context?
What are the SElinux security context type & booleans in FTP/vsftpd
View 3 Replies View RelatedI try to install IPsec-Tools on Slackware 13, but I get an configure error: configure: error: Security Context requested, bu no selinux support! Aborting. I'm linux newbie and I'm following a slackware-basics tutorial, I did as in the tutorial, but the configure stops and aborts:
Code:
# CFLAGS="-O2 -march=i486 -mcpu=i686"
./configure --prefix=/usr
--sysconfdir=/etc
--localstatedir=/var
[Code]...
What can I do? How can I enable/install selinux support? I guess it's related with AH and ESP protocols, which in my kernel are defined as modules (m). If so, how can I enable them?
Here is a link to atutorial which mentions following use of ReWriteRule is wrong.
Code:
RewriteEngine On
RewriteBase /
[code]....
i ran this
Code:
iptables -N rate-limit
iptables -A rate-limit -p tcp -m conntrack --ctstate NEW -m limit --limit 3/min --limit-burst 3 -j RETURN
iptables -A rate-limit -j DROP
iptables -I INPUT 1 -p tcp --dport 22 -j rate-limit
i am no longer able to ssh in to the machine , how can i reset iptables and firestarted back to default?
For a while now, I have been trying to reset my IP address in Ubuntu but I have had no luck. The reasons why I want to reset it and get a new one is because my service provider waits weeks to change it. I am concerned it has fallen into some unsavory hands. Also, can you be hacked if the would-be attacker is unaware of your IP address? Are there other means of locating your computer on the web without an IP address or webserver?
View 6 Replies View RelatedI was curious if anyone has addressed this issue before. I have set the permissions to /var/log/Xorg.0.log as follows:
Code:
-rw-r----- 1 root root 00000 Jan 00 00:00 /var/log/Xorg.0.log
I have done a lsof and the file is being opened by root. I have set Roots umask to 0077, yet after a reboot
[code]....
Why do I have an empty directory in the top of my filesystem labeled "cgroup" that goes by the file context above?And why does it apply to all files "/cgroup(/.*)?" as per a fcontext search?Did something break or is this the result of a new update?
View 2 Replies View RelatedThe script "vsftpd_virtualuser_add.sh" from the guide here:
http://wiki.centos.org/HowTos/Chroot_Vsftpd_with_non-system_users
executes the following line: /usr/bin/chcon -t public_content_rw_t $HOMEDIR/$USERNAME
which returns the error: /usr/bin/chcon: couldn't compute security context from unlabeled
Login attempts are unsuccessful on the given username.I followed the instructions on that page verbatim.I can't find anything useful on that error anywhere - even outside of vsftpd context.This is a new CentOS 5.5 server - updated everything with yum.VSFTP worked fine on the last server, which was a CentOS 5.x.
I've got a server that runs on Ubuntu Server 11.04 amd64.
I've installed Tomcat 6 and Apache 2 servers.
On Tomcat, I installed Liferay portal as a WAR. I can access to my portal with the following address : http://localhost:8080/lportal
I would like to associate a domain name to the "/lportal" context so that I could access my webapp with the "http://my.domain.com" URL. To make it short, I'd like to access the webapp on "http://localhost:8080/lportal" with "http://my.domain.com".
Being able to reset the root password by booting into single usermode by editing grub. This is a MAJOR flaw. I know it makes no real difference against internet bourne attacks, but even so I must say I found it shocking. The only way I've found to stop this is to encrypt the entire HDD, so noone could get into single user mode without first knowing the encryption key/password.
View 14 Replies View RelatedHow come FC11 is set by default to reset the IPTables firewall to ACCEPT across the board each restart?
View 4 Replies View RelatedI'm unable to reset using either the reset option in gnome shell or the command using a terminal. When I select it the shell exits and displays the graphic "exploding" and then it just sits there. Shutdown works fine; just no reset. Any ideas? I've installed from the DVD. I booted the live CD and it resets just fine so I know it's no my hardware
View 1 Replies View RelatedWe are trying to define an appliance based on Suse for an application server and Web server Apache, so we would like to know configuration best practices for network and security, is there any paper/doc about best practices?
View 3 Replies View RelatedHow do I reset the VNC password?
View 5 Replies View Relatedfor resetting the root user's password. Actually, I am using www.linuxzoo.net for online practice of Linux and have MySQL installed on it. But I forgot the password I set. There was no password by default set for the root user. So, I just trying setting a password last week. Now I am not getting what I did.
View 13 Replies View RelatedI am using RHEL 5.4 my root password is getting reset after every reboot.every time i had to change the password from kernel to access the root.i am unable to find the where the problem is.
View 2 Replies View RelatedI have messed around with yum config files & my system is not updating anymore! is there is a way to reset yum configuration to its default?
View 4 Replies View RelatedHere what I want to achieve. I have iso file images that I do not want to expand permanently via /etc/fstab, but instead via autofs. Then I want them to be exposed by HTTP and FTP. I am using CentOS 5.5 and below are the relevant part of configuration files.
/etc/auto.master:
/expanded /etc/auto.iso --ghost
/etc/auto.iso:
centos -fstype=iso9660,loop,ro,context=system_ubject_rublic_content_t:s0 :/isofiles/CentOS-5.5-i386-LiveDVD.iso
[code]....
i'm using fedora 13 OS and installed web invoice application in my server. whenever i open the site, the problem on "connection to the server was reset..." is persistent. i was advised to clear the cache which i did. it work for a while but with just a few page loaded the same problem occur and i need to clear the cache. again i found a suggestion in the internet to add post_max_size = 48M file_uploads = On upload_max_filesize = 192M to the php5.ini. i also did this in my server, but the same problem occurs.
View 6 Replies View RelatedYesterday, when I was installing Redhat Enterprise 5.4 on a HP server, I asked myself "how can I regain my access to the server if I happen to forget the root password?" I knew there must be a way. I consulted with my friend "Google". I'd like to share it here as my 1st post (too bad that I'm not allowed to paste screenshots)
1) Boot up the server, when you are at the "Red Hat Enterprise Linux Server..." entry, press "e".
2) Highlight the "kernel /vmlinuz...." line then press "e" again.
3) Type the word "single" to the end of the line (with an empty space before the word single). Press Enter.
4) Press "b"
5) System will boot. When you get the prompt "#", type "passwd" to enter in new password for root.
6) Reboot the system. Done
This is probably a newbie problem, so forgive me, but when I do this:chmod o+rw /dev/nst0It resets back to what it was upon reboot. How do I get this change to stick?I tried searching the forums and Google, but I haven't found an answer.
View 1 Replies View RelatedI see in /var/log/maillog this error and I do this checks:
[Code]....
In order to debug a problem, I want to list down as many as possible reasons of a server (SOAP server running on Fedora 10) sneding RST in middle of packet transfer. Please note that in my case, SYN and ACK of initial handshake went through. Server received request from client and started data transfer but then suddenly, server sent RST in between data transfer.
View 4 Replies View Related