Tag Info

New answers tagged

1

Converting my earlier comment into an answer, to popular demand ;) From the you-learn-something-everyday department: I saw Dan Walsh give a presentation yesterday, in which he explained the new way of disabling confinement for applications in newer releases of Fedora and EL6. You no longer set a boolean to disable transition (which sometimes ...


0

The sudo command and managing SELinux requires some additional handling, but typically simply running the command from an interactive root session is easiest: $ sudo -i Password: # setsebool -P httpd_can_sendmail on I think the issue is that you need to specify a role as part of the sudo command: -r role The -r (role) option causes the new ...


2

SELinux denies auditd to do anything with /mnt/ephemeral/audit because it doesn't have one of the allowed types; instead it appears to have a generic type. You need to tell SELinux what context to give this directory and the files in it. Ideally we'll copy the existing context that applies to /var/log/audit and reuse that. So when we look in ...


1

I think it fails to start because the log points to a symlink. You can define the log file location in /etc/audit/auditd.conf. From auditd.conf man page: log_file This keyword specifies the full path name to the log file where audit records will be stored. It must be a regular file.


0

It seems that you have an application engine, such as PHP, running as root. Verify the user owning the process for each of your server daemons through ps or top.


0

Try this commands: $ mkdir /etc/openvpn/scripts $ mv /etc/openvpn/update-resolv-conf /etc/openvpn/scripts/ $ restorecon -v /etc/openvpn/scripts/ $ restorecon -v /etc/openvpn/scripts/update-resolv-conf $ setsebool openvpn_run_unconfined on $ nano -w /etc/openvpn/config.conf up /etc/openvpn/update-resolv-conf ...



Top 50 recent answers are included