The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
1k views

SELinux forbids access to httpd userdir

I am running a CentOS machine. I want to serve user directories with Apache, so I configured httpd.conf to allow the public_html directory. I have added the apache user to my usergroup and chmod g+xr ...
1
vote
1answer
1k views

SELinux issues when adding rules

On my laptop I use Fedora 17 distro for the first time and I'm having some issues adding rules to semodule An example: # grep httpd /var/log/audit/audit.log | audit2allow -M mypol # semodule -i ...
1
vote
1answer
108 views

What is the highest SELinux privilege(role)?

I want to know what role is the highest role of SELinux. If I am mistaken, can anyone tell me what roles are available by default in SELinux?
1
vote
0answers
881 views

Allow SSH Password Login on Local Network

I have a home server running Fedora 16 I'd like to be able to access remotely via SSH. For users with sudo access, they should only be allowed to connect from the WAN with a key, but I want to allow ...
4
votes
1answer
333 views

Sticky Bit and SELinux

I recently got the question how sticky bit and SELinux play together. I only found this one site about Linux Permissions on Fedora Are there any other concerns using sticky bits and SELinux together?
1
vote
1answer
231 views

How to set SELinux context for HTML files updated by Dropbox?

I am trying to use a shared Dropbox folder to make HTML files easily editable by several people, and am (re)mounting the Dropbox folder to somewhere in /var/www/ with the --bind option. I have the ...
0
votes
1answer
437 views

Disable SELinux context

I've a RHEL 5 machine with SELinux disabled. sestatus -v SELinux status: disabled What is the effect of SELinux context on a user's home directory? ls -lZ -d zxtdfg drwx------ zxtdfg dba user_u:...
1
vote
1answer
588 views

curl (7) permission denied on cgi script

Can't understand which permissions could be denied. Running cgi script from command line works fine. http_proxy="" curl http://url/ -o file Produces curl(7): permission denied (same issues with ...
1
vote
1answer
746 views

Should Gentoo's Hardened profile / SELinux be used on normal desktop computers?

well, the title pretty much says everything. I'm installing Gentoo on my machine, and I'm wondering whether I should use SELinux or not for a desktop computer. I'd also like to know if there are any ...
4
votes
2answers
6k views

Making SELinux play nice with OpenVPN (in NetworkManager)

I have been trying to use OpenVPN to connect to my work network. Using it via the command line works fine: openvpn user.conf I haven't bothered to set it up with DNS properly though, and it looks ...
2
votes
1answer
2k views

php fopen permission problem

I'm learning php, and am having a problem while writing a file upload page. In the docroot, I have index.php (the page that calls fopen) and a directory called "images", where I wish the temporary ...
0
votes
1answer
440 views

SELinux allow http requests on Fedora 14

I have a Fedora 14 instance on Amazon EC2 and I want to make an http request from that instance to another one in the same amazon security group. When I use wget to make the request it works fine. ...
4
votes
1answer
1k views

Where did SELinux go?

I am compiling a new kernel, and want to enable SELinux but don't see it in menuconfig anywhere. The only framework under security options is Tomoyo.....so I ask, what happened to SELinux? Both 2.6.33....
57
votes
4answers
56k views

What does the dot mean at the end of `-rw-r--r--`? How do you set it with `chmod`?

I see that some of the files in my directories under Linux have a . at the end of the permissions listing. What does the dot mean at the end of -rw-r--r--? How do you set it with chmod?
0
votes
1answer
347 views

fsarchiver utility in order to make restore

I use the fsarchiver in order to make restore as the following link: http://www.icewalkers.com/Linux/Software/535640/fsarchiver.html command: fsarchiver restfs /tmp/backup/c0d0p2.fsa id=0,...
0
votes
1answer
493 views

Sandbox tool on OpenSUSE with operation not permited

I have installed Se Linux on my OpenSUSE 11.3 system. All configuration are correct. When I use the sandbox tool: > LANG=C sandbox -X -H sehome -T tmp -t sandbox_web_t firefox /usr/bin/chcon: ...
6
votes
2answers
16k views

How do I remove any SELinux context or ACL?

HI, I have some files, that I'd like to remove the SELinux context or ACLs from (denoted by a '.' or a '+' respectively when using ls -alZ). I don't have too much time on my hands to read on the , ...
3
votes
2answers
3k views

How do you boot linux with networking disabled?

Is there some way to disable networking by passing a kernel option through grub? Prefereably I could only disable 2 interfaces, but disabling all networking would be okay also. My use case is that I ...
1
vote
1answer
487 views

Where SELinux puts it alerts?

where SELinux writes it's alerts? I searched in google and man but not found this. I did tail -f to /var/log/secure, but also there, the lines were not added when SELinux policy violation took place. ...
1
vote
1answer
611 views

Empty folder and kernel panic when trying to get SELinux working

I have very strange things with SELinux. My post may be will bit disordered, because I'm not completely understand what is going on. Before all the story, I had good and very stable Linux ...
1
vote
1answer
201 views

“Slave” user accounts in GNU/Linux

How to make one user account to be like root for some other user account, e.g. to be able to read, write, chmod all it's files, chown from this account to master and back, kill/ptrace all it's ...
1
vote
2answers
397 views

Problems in starting mysql server

I'm trying to start the mysql server on fedora 12. service mysqld start gives me an error: MySQL Daemon failed to start. Starting MySQL: [FAILED] More details ...