SELinux (Security-Enhanced Linux) is an implementation of a flexible mandatory, role-based access control architecture on Linux. It is primarily used to confine system processes.
4
votes
2answers
863 views
Selinux is denying access to mysqld
I have a script that dumps a mysql database. It then compresses the file and this gets stored in my home folder by using cron. The problem is I seem to be getting an error message.
mysqldump: ...
-4
votes
2answers
206 views
Warning: DocumentRoot does not exist
If I use this code where docroot is my new root for subdomain
$ ls -la --context /var/www/html
drwxr-xr-x root root system_u:object_r:httpd_sys_content_t .
$ chcon -R ...
3
votes
1answer
171 views
SELinux interfering with host/guest file sharing using KVM
I'm running Fedora 17 with KVM and the virtual machine runs okay. I tried to follow this to get access to a file on the host system but SELinux prevents the VM from accessing any files other than ...
1
vote
1answer
174 views
Scientific Linux 6.3 run evince in SELinux sandbox
I'm trying to run evince in the SELinux sandbox:
sandbox -X /usr/bin/evince Unixforpoets.pdf
but after waiting for minutes nothing happens, console doesn't outputs anything. So I collected the ...
0
votes
1answer
29 views
SELinux Write access for vsftpd and samba
This should be easy enough I think, but I'm new to SELinux.
I have a CentOS 6 file server. I have some LVM file systems at /var/media and I want to use both Samba and FTP to share them with a Windows ...
0
votes
1answer
123 views
GDM will not start on boot, unable to login into graphical interface
I am running RHEL 5.8 .
SELinux is enabled but in permissive mode. Here are some snippets from /var/log/messages on boot.
kernel: type=1400 audit(1360613500.551:6): avc: denied { write } for ...
3
votes
0answers
186 views
fsarchiver error
I'm running the following fsarchiver command:
$ fsarchiver restfs /tmp/backup/c0d0p2.fsa id=0,dest=/dev/cciss/c0d0p2
I get the following error:
[errno=22, Invalid argument]: ...
2
votes
0answers
265 views
Debian: unable to setup SELinux
I'm trying to setup SELinux on Debian 6 according to (the instructions reported on the Debian wiki).
I've run this commands:
apt-get install selinux-basics selinux-policy-default
selinux-activate
...
2
votes
0answers
287 views
How do I set up the SELinux sandbox in Debian?
I've installed SELinux in Debian sid in order to use the sandbox that locks down apps to a restricted enviroment, but I can't get it to work. If I try to use the sandbox command in permissive mode ...
1
vote
0answers
53 views
403 Forbidden on Sub-Folders
I am a Linux newbie and decided to do a LAMP install to start getting more familiar with it (as our company is moving more towards nix these days). Everything went great and PHPMyAdmin, MySQL, ...
1
vote
0answers
104 views
selinux, dovecot and sieve
I've just started learning to configure SELINUX and this morning on my CentOS 6.4 x64 system, with postfix/dovecot/mysql installed, I woke up to the following selinux issue
found 1 alerts in ...
1
vote
0answers
146 views
Why setsebool command of SELINUX taking so long and slow?
Hi I am new to the SELINUX and I have noticed the command setsebool take longer time than other linux commands. Such as:
setsebool -P ftp_home_dir ON
Out of curiosity I want to know why "setsebool" ...
1
vote
0answers
90 views
How to set SELinux samba policy to enable dirs deletion/renaming?
I`m lost in trouble with SELinux once more link to my previous solved Q on Samba SELinux
When share's users try to delete a dir on share they fail with SELinux advertisement
to solve problem do ...
1
vote
0answers
165 views
How to get Wine to work with SELinux?
I want to run a .msi file on Fedora 17. After installing Wine Windows Program Loader on my Linux machine, it failed to run the file. A check on /var/log/messages shows the following line:
Jan 11 ...
1
vote
0answers
68 views
Can selinux log an application owner name?
So I've set up selinux to log all file access operations in a certain directory. Here's some sample log output when doing an ls from sftp:
type=AVC msg=audit(1338465611.221:356): avc: granted { ...
0
votes
0answers
16 views
PID Grabbing Via LSM Hooks
I am grabbing the LSM hooks in my own created module and showing into the securityfs psuedo filesystem which is showing correctly.
The path where these hooks are showing is
...
