New answers tagged selinux
Converting my earlier comment into an answer, to popular demand ;) From the you-learn-something-everyday department: I saw Dan Walsh give a presentation yesterday, in which he explained the new way of disabling confinement for applications in newer releases of Fedora and EL6. You no longer set a boolean to disable transition (which sometimes ...
The sudo command and managing SELinux requires some additional handling, but typically simply running the command from an interactive root session is easiest: $ sudo -i Password: # setsebool -P httpd_can_sendmail on I think the issue is that you need to specify a role as part of the sudo command: -r role The -r (role) option causes the new ...
SELinux denies auditd to do anything with /mnt/ephemeral/audit because it doesn't have one of the allowed types; instead it appears to have a generic type. You need to tell SELinux what context to give this directory and the files in it. Ideally we'll copy the existing context that applies to /var/log/audit and reuse that. So when we look in ...
I think it fails to start because the log points to a symlink. You can define the log file location in /etc/audit/auditd.conf. From auditd.conf man page: log_file This keyword specifies the full path name to the log file where audit records will be stored. It must be a regular file.
It seems that you have an application engine, such as PHP, running as root. Verify the user owning the process for each of your server daemons through ps or top.
Try this commands: $ mkdir /etc/openvpn/scripts $ mv /etc/openvpn/update-resolv-conf /etc/openvpn/scripts/ $ restorecon -v /etc/openvpn/scripts/ $ restorecon -v /etc/openvpn/scripts/update-resolv-conf $ setsebool openvpn_run_unconfined on $ nano -w /etc/openvpn/config.conf up /etc/openvpn/update-resolv-conf ...
Top 50 recent answers are included