The selinux tag has no wiki summary.
0
votes
0answers
72 views
New Install of SL 6.4 and I cant do a yum install
I just had to do a new install of SL 6.4 Linux and as I try to do yum install it looks like the repo is down. Can someone please tell me how to change to a mirror. See error below
yum install ...
0
votes
1answer
33 views
Selinux what's the right context for module like imagemagick /usr/bin/convert
I have an application I need to call from php, but selinux is preventing execmem for the application. I want to set the right context rather than allow bin_t or httpd_user_script_t execmem access. I ...
0
votes
0answers
181 views
Can't send mail from centos6
I am not sure what went wrong but I can't seem to send any mail from my server. Not from PHP and not from the command-line. The only thing I can think of that I did is to install auditd.
What I ...
1
vote
1answer
171 views
Trying key based password-less SSH login to remote computer but still being asked for password
Trying to SSH in to remote computer but still asking for password.
I have a number of computers running SElinux and only one of them is giving me a hard time using ssh without the password.
I did ...
1
vote
1answer
167 views
Cannot write samba shares
Running samba 3.5 on Red Hat Enterprise 6.1 I'm having issues sharing two folders. Here is the output of testparm:
[global]
workgroup = DOMAINNAME
server string = Samba Server Version %v
...
1
vote
1answer
76 views
SELinux - CentOSx86_64: User command limitation
SELinux - CentOSx86_64: User command limitation
Is SELinux the right tool for this job? If so, what is the best way to do it?
I would like to limit a particular user to only running some list of ...
1
vote
0answers
20 views
What are the improvements of Flask compared with traditional MAC?
I know that traditional MAC has limitations, like that it provides poor support for data and application integrity, separation of duty, and least privilege requirements. So NSA and SCC developed a ...
0
votes
0answers
71 views
Can SELinux really prevent buffer overflow attacks? And what about virtual memory attacks? [closed]
I've read some comments about SELinux. Dan Walsh says it can, since SELinux provides confinement of executable memory. But some others argue that SELinux cannot really provide prevention of this kind ...
0
votes
1answer
158 views
How to set up VPN on a new Fedora 16 install?
I have a new Fedora 16 install with Gnome and want to use VPN. The instructions at Riseup.net say if the certificate is not read because SEinux is enabled then I need to put my riseup.pem in ~/.cert. ...
0
votes
1answer
211 views
SELinux forbids access to httpd userdir
I am running a CentOS machine. I want to serve user directories with Apache, so I configured httpd.conf to allow the public_html directory.
I have added the apache user to my usergroup and chmod g+xr ...
1
vote
0answers
338 views
SELinux issues when adding rules
On my laptop I use Fedora 17 distro for the first time and I'm having some issues adding rules to semodule
An example:
# grep httpd /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i ...
0
votes
1answer
55 views
What is the highest SELinux privilege(role)?
I want to know what role is the highest role of SELinux.
If I am mistaken, can anyone tell me what roles are available by default in SELinux?
1
vote
0answers
277 views
Allow SSH Password Login on Local Network
I have a home server running Fedora 16 I'd like to be able to access remotely via SSH. For users with sudo access, they should only be allowed to connect from the WAN with a key, but I want to allow ...
0
votes
0answers
78 views
What configuration does the selinux-policy-default have in Debian 6?
I recently installed SElinux on my Debian 6 Desktop System - I have a bit of experience with SElinux but the default policy is new to me - where does targeted and strict go?
I want a policy for my ...
2
votes
1answer
100 views
Sticky Bit and SELinux
I recently got the question how sticky bit and SELinux play together. I only found this one site about Linux Permissions on Fedora
Are there any other concerns using sticky bits and SELinux together?
...
1
vote
1answer
129 views
How to set SELinux context for HTML files updated by Dropbox?
I am trying to use a shared Dropbox folder to make HTML files easily editable by several people, and am (re)mounting the Dropbox folder to somewhere in /var/www/ with the --bind option. I have the ...
0
votes
1answer
136 views
Disable SELinux context
I've a RHEL 5 machine with SELinux disabled.
sestatus -v
SELinux status: disabled
What is the effect of SELinux context on a user's home directory?
ls -lZ -d zxtdfg
drwx------ zxtdfg dba ...
0
votes
1answer
248 views
curl (7) permission denied on cgi script
Can't understand which permissions could be denied. Running cgi script from command line works fine.
http_proxy="" curl http://url/ -o file
Produces curl(7): permission denied
(same issues with ...
0
votes
1answer
228 views
Should Gentoo's Hardened profile / SELinux be used on normal desktop computers?
well, the title pretty much says everything. I'm installing Gentoo on my machine, and I'm wondering whether I should use SELinux or not for a desktop computer. I'd also like to know if there are any ...
2
votes
2answers
2k views
Making SELinux play nice with OpenVPN (in NetworkManager)
I have been trying to use OpenVPN to connect to my work network. Using it via the command line works fine:
openvpn user.conf
I haven't bothered to set it up with DNS properly though, and it looks ...
1
vote
1answer
863 views
php fopen permission problem
I'm learning php, and am having a problem while writing a file upload page.
In the docroot, I have index.php (the page that calls fopen) and a directory called "images", where I wish the temporary ...
0
votes
1answer
187 views
SELinux allow http requests on Fedora 14
I have a Fedora 14 instance on Amazon EC2 and I want to make an http request from that instance to another one in the same amazon security group. When I use wget to make the request it works fine. ...
4
votes
1answer
303 views
Where did SELinux go?
I am compiling a new kernel, and want to enable SELinux but don't see it in menuconfig anywhere. The only framework under security options is Tomoyo.....so I ask, what happened to SELinux? Both ...
0
votes
1answer
205 views
fsarchiver utility in order to make restore
I use the fsarchiver in order to make restore as the following
link: http://www.icewalkers.com/Linux/Software/535640/fsarchiver.html
command:
fsarchiver restfs /tmp/backup/c0d0p2.fsa ...
0
votes
1answer
280 views
Sandbox tool on OpenSUSE with operation not permited
I have installed Se Linux on my OpenSUSE 11.3 system. All configuration are correct.
When I use the sandbox tool:
> LANG=C sandbox -X -H sehome -T tmp -t sandbox_web_t firefox
/usr/bin/chcon: ...
-1
votes
2answers
4k views
How do I remove any SELinux context or ACL?
HI, I have some files, that I'd like to remove the SELinux context or ACLs from (denoted by a '.' or a '+' respectively when using ls -alZ).
I don't have too much time on my hands to read on the , ...
2
votes
2answers
606 views
How do you boot linux with networking disabled?
Is there some way to disable networking by passing a kernel option through grub? Prefereably I could only disable 2 interfaces, but disabling all networking would be okay also.
My use case is that I ...
0
votes
1answer
180 views
Where SELinux puts it alerts?
where SELinux writes it's alerts?
I searched in google and man but not found this.
I did tail -f to /var/log/secure, but also there, the lines were not added when SELinux policy violation took place.
...
1
vote
1answer
389 views
Empty folder and kernel panic when trying to get SELinux working
I have very strange things with SELinux.
My post may be will bit disordered, because I'm not completely understand what is going on.
Before all the story, I had good and very stable Linux ...
1
vote
1answer
166 views
“Slave” user accounts in GNU/Linux
How to make one user account to be like root for some other user account, e.g. to be able to read, write, chmod all it's files, chown from this account to master and back, kill/ptrace all it's ...
1
vote
2answers
301 views
Problems in starting mysql server
I'm trying to start the mysql server on fedora 12. service mysqld start gives me an error:
MySQL Daemon failed to start.
Starting MySQL: [FAILED]
More details
...
