The tag has no wiki summary.

learn more… | top users | synonyms

1
vote
2answers
117 views

PHP can't connect to PostgreSQL with “permission denied” error with SELinux

My PHP app can connect when I turn off SELinux, but not with it on. setenforce 0; curl -I http://domain.com; setenforce 1 Yields no errors in /var/log/httpd/error_log. However, if I have it on, I ...
0
votes
1answer
39 views

Is SELinux really useful or needed [closed]

So I noticed that Fedora takes around 35 seconds to boot and ArchBang was only taking around 15. I did soom looking into it and I guess SELinux has a lot to dow ith this and I was wondering if ...
0
votes
1answer
46 views

Installing linux/selinux kernal headers

I'm trying to build the newest version of glibc (2.19) on CentOS 5.6 and I've run into some issues The documentation of glibc says that I need at minimum the linux kernal headers 2.6.19 (even if this ...
0
votes
0answers
27 views

How to create a selinux context that merges two existing contexts?

I want to have a git repository available to both: the smart http transport and thus writable by apache - this is handled by the httpd_sys_rw_content_t context. the gitweb interface - this is ...
1
vote
1answer
42 views

Selinux deny root user

I am using SELinux in my centos server. I am trying to change context of the file located in the /var/www/html as a root user. Root user is also not able to make any changes in the context of the ...
0
votes
1answer
110 views

Permission denied even with 777 and disabled selinux

On a centos 6.5 machine I wanted to create a general user, where its home directory is shared among many users, called shareduser /home/shareduser has mod 700 Then the shared folder is called: ...
6
votes
1answer
160 views

What are the main impacts of SELinux, from an administration point of view?

Thanks to Wikipedia and others, we can have a vague idea of what SELinux is. I understood it gives ways to handle permissions more precisely, but I'm really not aware about how. The question would ...
0
votes
1answer
160 views

How can I run Skype under an SELinux sandbox?

I would like to run Skype under an SELinux sandbox, to protect my computer. However I get the following error: usr/bin/skype: error while loading shared libraries: /lib/libQtWebKit.so.4: cannot ...
1
vote
1answer
16 views

SELinux access only to opened files

I am studying SELinux. Using SELinux, can a binary be allowed to access files opened by its parent process, and no other files? If it cannot, then we should enhance it.
1
vote
1answer
302 views

SELinux transition from unconfined_r to user_r

On a Fedora 18 machine, I have the following SELinux context as a regular user created during installation: $ sestatus SELinux status: enabled Loaded policy name: targeted ...
0
votes
1answer
305 views

Limit program's (Viber for Linux) access only to certain directory

Is it possible to limit programs' access only to certain directory, for example, to run Viber on Fedora and force it to only be able to read under /home/username/.local/share/viber/exchange and no ...
1
vote
1answer
73 views

vsftpd hides certain extensions, how to disable it?

I just enabled vsftpd on my laptop (Fedora 18 if that matters and vsftpd version 3.0.2) and tried to connect to it with my Android phone: success! Still, some minutes later, I stumbled upon a folder ...
1
vote
2answers
224 views

semanage command not changing file context

I am trying to change selinux context for upload directory to enable anonymous upload. This is the Directory path /var/ftp/upload This is the default context [root@server ftp]# ls -Z upload ...
0
votes
1answer
65 views

Disabled SELinux then rebooted, but reboot seems to have hanged?

I disabled SELinux by editing /etc/selinux/config to include the line SELINUX=disabled This change requires rebooting to activate, so I did that. I'm now sitting in front of a black screen with ...
0
votes
1answer
105 views

Prevent FTP transfer from failing when FTP server is restarted

When downloading large files (ca. 5GB) with the lftp client, I find that a restart of the FTP service (vsftpd) stops the transfer and I have to restart it from the beginning. Is there a way to prevent ...
0
votes
0answers
377 views

How to allow apache to execute R binary from PHP exec() without disabling SELinux?

I have R installed in /opt/R of webserver. I need to execute script.r (In R BATCH mode) that is on directory /var/www/html/ using PHP function exec(). SELinux is enabled in the webserver. I suppose ...
1
vote
1answer
592 views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
0
votes
1answer
85 views

Selinux what's the right context for module like imagemagick /usr/bin/convert

I have an application I need to call from php, but selinux is preventing execmem for the application. I want to set the right context rather than allow bin_t or httpd_user_script_t execmem access. I ...
1
vote
1answer
1k views

Trying key based password-less SSH login to remote computer but still being asked for password

Trying to SSH in to remote computer but still asking for password. I have a number of computers running SElinux and only one of them is giving me a hard time using ssh without the password. I did ...
1
vote
1answer
766 views

Cannot write samba shares

Running samba 3.5 on Red Hat Enterprise 6.1 I'm having issues sharing two folders. Here is the output of testparm: [global] workgroup = DOMAINNAME server string = Samba Server Version %v ...
1
vote
1answer
242 views

SELinux - CentOSx86_64: User command limitation

SELinux - CentOSx86_64: User command limitation Is SELinux the right tool for this job? If so, what is the best way to do it? I would like to limit a particular user to only running some list of ...
1
vote
0answers
37 views

What are the improvements of Flask compared with traditional MAC?

I know that traditional MAC has limitations, like that it provides poor support for data and application integrity, separation of duty, and least privilege requirements. So NSA and SCC developed a ...
0
votes
1answer
334 views

How to set up VPN on a new Fedora 16 install?

I have a new Fedora 16 install with Gnome and want to use VPN. The instructions at Riseup.net say if the certificate is not read because SEinux is enabled then I need to put my riseup.pem in ~/.cert. ...
0
votes
1answer
444 views

SELinux forbids access to httpd userdir

I am running a CentOS machine. I want to serve user directories with Apache, so I configured httpd.conf to allow the public_html directory. I have added the apache user to my usergroup and chmod g+xr ...
1
vote
0answers
551 views

SELinux issues when adding rules

On my laptop I use Fedora 17 distro for the first time and I'm having some issues adding rules to semodule An example: # grep httpd /var/log/audit/audit.log | audit2allow -M mypol # semodule -i ...
1
vote
1answer
88 views

What is the highest SELinux privilege(role)?

I want to know what role is the highest role of SELinux. If I am mistaken, can anyone tell me what roles are available by default in SELinux?
1
vote
0answers
496 views

Allow SSH Password Login on Local Network

I have a home server running Fedora 16 I'd like to be able to access remotely via SSH. For users with sudo access, they should only be allowed to connect from the WAN with a key, but I want to allow ...
3
votes
1answer
179 views

Sticky Bit and SELinux

I recently got the question how sticky bit and SELinux play together. I only found this one site about Linux Permissions on Fedora Are there any other concerns using sticky bits and SELinux together? ...
1
vote
1answer
195 views

How to set SELinux context for HTML files updated by Dropbox?

I am trying to use a shared Dropbox folder to make HTML files easily editable by several people, and am (re)mounting the Dropbox folder to somewhere in /var/www/ with the --bind option. I have the ...
0
votes
1answer
228 views

Disable SELinux context

I've a RHEL 5 machine with SELinux disabled. sestatus -v SELinux status: disabled What is the effect of SELinux context on a user's home directory? ls -lZ -d zxtdfg drwx------ zxtdfg dba ...
0
votes
1answer
359 views

curl (7) permission denied on cgi script

Can't understand which permissions could be denied. Running cgi script from command line works fine. http_proxy="" curl http://url/ -o file Produces curl(7): permission denied (same issues with ...
1
vote
1answer
394 views

Should Gentoo's Hardened profile / SELinux be used on normal desktop computers?

well, the title pretty much says everything. I'm installing Gentoo on my machine, and I'm wondering whether I should use SELinux or not for a desktop computer. I'd also like to know if there are any ...
3
votes
2answers
3k views

Making SELinux play nice with OpenVPN (in NetworkManager)

I have been trying to use OpenVPN to connect to my work network. Using it via the command line works fine: openvpn user.conf I haven't bothered to set it up with DNS properly though, and it looks ...
1
vote
1answer
1k views

php fopen permission problem

I'm learning php, and am having a problem while writing a file upload page. In the docroot, I have index.php (the page that calls fopen) and a directory called "images", where I wish the temporary ...
0
votes
1answer
279 views

SELinux allow http requests on Fedora 14

I have a Fedora 14 instance on Amazon EC2 and I want to make an http request from that instance to another one in the same amazon security group. When I use wget to make the request it works fine. ...
4
votes
1answer
566 views

Where did SELinux go?

I am compiling a new kernel, and want to enable SELinux but don't see it in menuconfig anywhere. The only framework under security options is Tomoyo.....so I ask, what happened to SELinux? Both ...
0
votes
1answer
272 views

fsarchiver utility in order to make restore

I use the fsarchiver in order to make restore as the following link: http://www.icewalkers.com/Linux/Software/535640/fsarchiver.html command: fsarchiver restfs /tmp/backup/c0d0p2.fsa ...
0
votes
1answer
404 views

Sandbox tool on OpenSUSE with operation not permited

I have installed Se Linux on my OpenSUSE 11.3 system. All configuration are correct. When I use the sandbox tool: > LANG=C sandbox -X -H sehome -T tmp -t sandbox_web_t firefox /usr/bin/chcon: ...
3
votes
2answers
9k views

How do I remove any SELinux context or ACL?

HI, I have some files, that I'd like to remove the SELinux context or ACLs from (denoted by a '.' or a '+' respectively when using ls -alZ). I don't have too much time on my hands to read on the , ...
2
votes
2answers
1k views

How do you boot linux with networking disabled?

Is there some way to disable networking by passing a kernel option through grub? Prefereably I could only disable 2 interfaces, but disabling all networking would be okay also. My use case is that I ...
1
vote
1answer
322 views

Where SELinux puts it alerts?

where SELinux writes it's alerts? I searched in google and man but not found this. I did tail -f to /var/log/secure, but also there, the lines were not added when SELinux policy violation took place. ...
1
vote
1answer
506 views

Empty folder and kernel panic when trying to get SELinux working

I have very strange things with SELinux. My post may be will bit disordered, because I'm not completely understand what is going on. Before all the story, I had good and very stable Linux ...
1
vote
1answer
189 views

“Slave” user accounts in GNU/Linux

How to make one user account to be like root for some other user account, e.g. to be able to read, write, chmod all it's files, chown from this account to master and back, kill/ptrace all it's ...
1
vote
2answers
352 views

Problems in starting mysql server

I'm trying to start the mysql server on fedora 12. service mysqld start gives me an error: MySQL Daemon failed to start. Starting MySQL: [FAILED] More details ...