Choosing A Webhost:
A web hosting service is a type of Internet hosting service that allows individuals and organizations to provide their own website accessible via the World Wide Web. Web hosts are companies that provide space on a server they own for use by their clients as well as providing Internet connectivity, typically in a data center. Web hosts can also provide data center space and connectivity to the Internet for servers they do not own to be located in their data center, called colocation. more...
|
Re: FC3 Strict Policy: msg#00191
|
Subject: |
Re: FC3 Strict Policy |
Try relabeling:
touch /.autorelabel
Then reboot your system.
Bob
On Fri, 2005-05-27 at 15:42 -0700, Jeremy Utley wrote:
> Hello Everyone!
>
> I'm trying my first foray into experimenting with SELinux, and am
> failing before I even get very far. I've installed Fedora Core 3 and
> have enabled the SELinux strict policy. The only way I can log into
> the system now is if I put the system into permissive mode. Here's
> the denied errors I'm getting:
>
> May 27 15:15:18 localhost kernel: audit(1117232118.583:0): avc:
> denied { getattr } for pid=4380 exe=/sbin/unix_chkpwd
> path=/var/run/winbindd dev=sda1 ino=1653914
> scontext=system_u:system_r:system_chkpwd_t
> tcontext=system_u:object_r:var_run_t tclass=dir
> May 27 15:15:18 localhost kernel: audit(1117232118.586:0): avc: denied {
> read
> write } for pid=4381 exe=/sbin/unix_chkpwd name=tty2 dev=tmpfs
> ino=2025 scontext=system_u:system_r:system_chkpwd_t
> tcontext=root:object_r:sysadm_tty_device_t tclass=chr_file
> May 27 15:15:18 localhost kernel: audit(1117232118.589:0): avc:
> denied { getattr } for pid=4291 exe=/bin/login
> path=/var/run/winbindd dev=sda1 ino=1653914
> scontext=system_u:system_r:local_login_t
> tcontext=system_u:object_r:var_run_t tclass=dir
> May 27 15:15:18 localhost kernel: audit(1117232118.590:0): avc:
> denied { getattr } for pid=4291 exe=/bin/login path=/root dev=sda1
> ino=1864129 scontext=system_u:system_r:local_login_t
> tcontext=root:object_r:staff_home_dir_t tclass=dir
>
> The system is fully up to date via yum. I realize some problems can
> be expected when using the strict policy as opposed to targeted - but
> I can't believe the strict policy would ship in a configuration that
> prevents logging into the system.
>
> Anyone got any suggestions - I can't believe I'm the only person who's
> faced this, but I did a lot of searching online and couldn't find
> anything.
>
> Jeremy
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> http://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
Bob Kashani
http://www.ocf.berkeley.edu/~bobk/garnome
|
| |
