The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
2answers
49 views

Can I sandbox a binary created in C (with GCC) for Linux and make it easy for users?

I have compiled a binary that I want to distribute to other people. It's closed-source, but I want to provide users of the binary with confidence that it cannot possibly access the internet, ...
1
vote
1answer
107 views

“Cannot open audit interface” upgrading libuuid1 — is selinux confused?

I have a Debian chroot on a Linux system running an alternative Linux distro. It's always worked fine in the past but in the past few months I've found myself unable to upgrade libuuid1. Instead it ...
1
vote
1answer
175 views

vsftpd hides certain extensions, how to disable it?

I just enabled vsftpd on my laptop (Fedora 18 if that matters and vsftpd version 3.0.2) and tried to connect to it with my Android phone: success! Still, some minutes later, I stumbled upon a folder ...
1
vote
1answer
2k views

Configuring SELINUX to allow logging to a file that's outside /var/log

I have a daemon that uses syslog(3) to log to a file that is not a descendant of /var/log. Currently, this requires that SELINUX be disabled. How can I configure an enabled SELINUX to allow this ...
1
vote
1answer
1k views

Cannot write samba shares

Running samba 3.5 on Red Hat Enterprise 6.1 I'm having issues sharing two folders. Here is the output of testparm: [global] workgroup = DOMAINNAME server string = Samba Server Version %v ...
1
vote
1answer
336 views

SELinux - CentOSx86_64: User command limitation

SELinux - CentOSx86_64: User command limitation Is SELinux the right tool for this job? If so, what is the best way to do it? I would like to limit a particular user to only running some list of pre-...
1
vote
1answer
1k views

SELinux issues when adding rules

On my laptop I use Fedora 17 distro for the first time and I'm having some issues adding rules to semodule An example: # grep httpd /var/log/audit/audit.log | audit2allow -M mypol # semodule -i ...
1
vote
1answer
607 views

Empty folder and kernel panic when trying to get SELinux working

I have very strange things with SELinux. My post may be will bit disordered, because I'm not completely understand what is going on. Before all the story, I had good and very stable Linux ...
1
vote
1answer
201 views

“Slave” user accounts in GNU/Linux

How to make one user account to be like root for some other user account, e.g. to be able to read, write, chmod all it's files, chown from this account to master and back, kill/ptrace all it's ...
0
votes
1answer
97 views

How to prevent SELinux from installing with CentOS 6.5

I know I can disable SELinux in CentOS 6.5, but I’d prefer to just not install it at all from the point of the actual, initial installation. But I can’t find anywhere in the CentOS installer to shut ...
0
votes
1answer
199 views

restorecon in CentOS does not follow fcontext order

Experimenting with file contexts, I have faced a strange behaviour and it looks to me I'm missing something. Here's what I do: Create a bunch of directories and files # mkdir -p /virtual/www/cgi-bin ...
0
votes
1answer
261 views

Permission denied even with 777 and disabled selinux

On a centos 6.5 machine I wanted to create a general user, where its home directory is shared among many users, called shareduser /home/shareduser has mod 700 Then the shared folder is called: /home/...
0
votes
1answer
526 views

How can I run Skype under an SELinux sandbox?

I would like to run Skype under an SELinux sandbox, to protect my computer. However I get the following error: usr/bin/skype: error while loading shared libraries: /lib/libQtWebKit.so.4: cannot ...
0
votes
1answer
96 views

Disabled SELinux then rebooted, but reboot seems to have hanged?

I disabled SELinux by editing /etc/selinux/config to include the line SELINUX=disabled This change requires rebooting to activate, so I did that. I'm now sitting in front of a black screen with '...
0
votes
1answer
1k views

SELinux forbids access to httpd userdir

I am running a CentOS machine. I want to serve user directories with Apache, so I configured httpd.conf to allow the public_html directory. I have added the apache user to my usergroup and chmod g+xr ...
0
votes
1answer
433 views

Disable SELinux context

I've a RHEL 5 machine with SELinux disabled. sestatus -v SELinux status: disabled What is the effect of SELinux context on a user's home directory? ls -lZ -d zxtdfg drwx------ zxtdfg dba user_u:...
0
votes
1answer
343 views

fsarchiver utility in order to make restore

I use the fsarchiver in order to make restore as the following link: http://www.icewalkers.com/Linux/Software/535640/fsarchiver.html command: fsarchiver restfs /tmp/backup/c0d0p2.fsa id=0,...
2
votes
0answers
241 views

HIPS for Linux (ie, interactive SELinux/AppArmor)

Windows has a number of programs (generally referred to as Host-based Intrusion Prevention Systems) that offer protection against difficult security threats (such as zero-day exploits) by blocking ...
1
vote
0answers
143 views

selinux: how to enable httpd to have read-write and execute permissions

I am facing problems with PHP interface that calls perl and shell scripts. These enable uploading of a file to a folder and execute them with some input while storing output into some other files. Now ...
1
vote
0answers
130 views

Is there anyway you can restrict users from executing a command with another name?

I'm not asking an obvious question here. I would like to elucidate with an example. A user 'bob' is always executing 'chmod 777 /home/bob/impfiles' so that user 'alice' could make changes to the ...
1
vote
0answers
59 views

What are the improvements of Flask compared with traditional MAC?

I know that traditional MAC has limitations, like that it provides poor support for data and application integrity, separation of duty, and least privilege requirements. So NSA and SCC developed a ...
1
vote
0answers
868 views

Allow SSH Password Login on Local Network

I have a home server running Fedora 16 I'd like to be able to access remotely via SSH. For users with sudo access, they should only be allowed to connect from the WAN with a key, but I want to allow ...
0
votes
0answers
37 views

Using SELinux with a modified OpenEmbedded release

I'm new with OpenEmbedded, so bear with me if I get some things wrong. I would like to support SELinux on an embedded target that uses a modified OpenEmbedded Linux distribution. I have enabled the ...
0
votes
0answers
34 views

How to Configure Sudo to Preserve Group and User IDs as Owners?

Question I am running sudo 1.8.15 on Ubuntu 15.10 (wily). The last two entries in my /etc/sudoers file are: Defaults:nginx stay_setuid,targetpw,env_reset nginx ALL=(ALL) PASSWD: ALL But, when I ...
0
votes
0answers
109 views

Which Debian has SElinux and Firewalld out of the box?

I am willing to learn how to work with Debian, I want to know why it is the 1st server choice compared to CentOS, although CentOS seems to use SELinux and Firewalld. I am coming from a CentOS ...
0
votes
0answers
11 views

SELinux policy for ifplugd and udev in Raspbian

I've recently enabled SELinux on my RaspberryPi and recieved some AVCs denials. I'm reading SEL documentation and have resolved a few of them. But I'm not sure if I did it right. So please review my ...
0
votes
0answers
48 views

SELinux policy for ifplugd and udev in Raspbian

I've recently enabled SELinux on my RaspberryPi and recieved some AVCs denials. I'm reading SEL documentation and have resolved a few of them. But I'm not sure if I did it right. So please review my ...
0
votes
0answers
11 views

Linux containerization technologies and uses

I am trying to understand various security mechanisms available in Linux and how they are related. Let's say I am trying to lock down a system daemon so that it only has access to the resources it ...
0
votes
0answers
42 views

how to automate selinux policy

I am working on a project to equip Security Enhanced Linux to take automatic decision of allowing or totally blocking access to a user, application or process based on certain environmental conditions....
0
votes
0answers
18 views

SELinux issue with php_shell_exec

I have a php site on CentOS7 that needs to use some shell scripts using php_shell_exec. But the scripts do not run due to SELinux (that I require). None of the scripts use sudo, I understand that ...
0
votes
0answers
802 views

How to allow apache to execute R binary from PHP exec() without disabling SELinux?

I have R installed in /opt/R of webserver. I need to execute script.r (In R BATCH mode) that is on directory /var/www/html/ using PHP function exec(). SELinux is enabled in the webserver. I suppose ...