SELinux (Security-Enhanced Linux) is an implementation of a flexible mandatory, role-based access control architecture on Linux. It is primarily used to confine system processes.
0
votes
0answers
15 views
PID Grabbing Via LSM Hooks
I am grabbing the LSM hooks in my own created module and showing into the securityfs psuedo filesystem which is showing correctly.
The path where these hooks are showing is
...
1
vote
0answers
36 views
403 Forbidden on Sub-Folders
I am a Linux newbie and decided to do a LAMP install to start getting more familiar with it (as our company is moving more towards nix these days). Everything went great and PHPMyAdmin, MySQL, ...
1
vote
2answers
162 views
SELinux: Can I disable copying of certain files?
Please excuse me if this is too basic and you're tempted to throw an RTFM at me.
I want to prevent users from copying certain files while granting them read access to the same files. I thought this ...
1
vote
0answers
63 views
selinux, dovecot and sieve
I've just started learning to configure SELINUX and this morning on my CentOS 6.4 x64 system, with postfix/dovecot/mysql installed, I woke up to the following selinux issue
found 1 alerts in ...
1
vote
0answers
116 views
Why setsebool command of SELINUX taking so long and slow?
Hi I am new to the SELINUX and I have noticed the command setsebool take longer time than other linux commands. Such as:
setsebool -P ftp_home_dir ON
Out of curiosity I want to know why "setsebool" ...
1
vote
1answer
129 views
How do I install SELinux's sandbox utility on Linux Mint Debian Edition?
I'm following the Debian SELinux setup guide with my Linux Mint Debian Edition system. I installed the necessary packages:
sudo aptitude install selinux-basics selinux-policy-default selinux-utils ...
-1
votes
1answer
49 views
Why setsebool for httpd not working with -P parameter?
I'm trying to disable SELinux for httpd, but when I use the the setsebool command with -P parameter, it doesn't work:
setsebool -P http_can_network_connect 1
Nothing happens when I do that ie, the ...
0
votes
1answer
111 views
GDM will not start on boot, unable to login into graphical interface
I am running RHEL 5.8 .
SELinux is enabled but in permissive mode. Here are some snippets from /var/log/messages on boot.
kernel: type=1400 audit(1360613500.551:6): avc: denied { write } for ...
5
votes
9answers
226 views
How to prevent a process from writing files
I want to run a command on Linux in a way that it cannot create or open any files to write. It should still be able to read files as normal (so an empty chroot is not an option), and still be able to ...
4
votes
1answer
339 views
Gnome terminal fails to start
After upgrading to Fedora 18, on certain occasions, gnome-terminal will fail to launch, requiring me to log out of the desktop and log in again. I tried tracing the error and found the following in ...
1
vote
0answers
82 views
How to set SELinux samba policy to enable dirs deletion/renaming?
I`m lost in trouble with SELinux once more link to my previous solved Q on Samba SELinux
When share's users try to delete a dir on share they fail with SELinux advertisement
to solve problem do ...
1
vote
0answers
153 views
How to get Wine to work with SELinux?
I want to run a .msi file on Fedora 17. After installing Wine Windows Program Loader on my Linux machine, it failed to run the file. A check on /var/log/messages shows the following line:
Jan 11 ...
3
votes
1answer
160 views
SELinux interfering with host/guest file sharing using KVM
I'm running Fedora 17 with KVM and the virtual machine runs okay. I tried to follow this to get access to a file on the host system but SELinux prevents the VM from accessing any files other than ...
1
vote
1answer
186 views
SELinux and samba
I have to set SELinux setenforce Permissive in order to give access to my samba share. I wonder if there is proper way to configure SELinux policy for fedora 17 as good admins do.
2
votes
1answer
67 views
To check which resource is being accessed by which process
I have some process running on my system. I need to list out which of the process at a moment has acquired/is using one or more of these in my system:
Ethernet
Camera
USB
Bluetooth
WiFi
File System
...
