Re: selinux denies X, but can get in via permissive mode

[Antonio Olivares <olivares14031 yahoo com>]

--- Daniel J Walsh <dwalsh redhat com> wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Antonio Olivares wrote:
> > --- Dennis Jacobfeuerborn
> > <d jacobfeuerborn conversis de> wrote:
> > 
> >> Antonio Olivares wrote:
> >>> No, I tried
> >>> # touch ./autorelabel
> >> That should be "touch /.autorelabel"
> >>
> >> Regards,
> >>    Dennis
> >>
> >> -- 
> >> fedora-test-list mailing list
> >> fedora-test-list redhat com
> >> To unsubscribe: 
> >>
> >
>
https://www.redhat.com/mailman/listinfo/fedora-test-list
> > 
> > I did it the right way as you write it correctly. 
> But
> > still get a bunch of errors.  I have to still boot
> > with enforcing=0 because the selinux denials are
> too
> > much to handle.  The setroubleshooter utility
> fires
> > like the fastest guns in the west.  It will need
> to
> > wait for a bigger fix than the ones in the avcs
> > message to fix.
> > 
> > Regards,
> > 
> > Antonio 
> > 
> > 
> >      
>
____________________________________________________________________________________
> > Be a better friend, newshound, and 
> > know-it-all with Yahoo! Mobile.  Try it now. 
>
http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
> > 
> 
> I would try the following commands, they should have
> executed during the
> upgrade.
> 
> # semanage user -a -S targeted -P user -R
> "unconfined_r system_r" -r
> s0-s0:c0.c1023 unconfined_u
> # semanage login -m -S targeted  -P user -s
> "unconfined_u" -r
> s0-s0:c0.c1023 __default__
> # semanage login -m -S targeted  -P user -s
> "unconfined_u" -r
> s0-s0:c0.c1023 root
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora -
> http://enigmail.mozdev.org
> 
>
iEYEARECAAYFAkgHQtMACgkQrlYvE4MpobODCACfcX5PPphfMlvt2/Ch07zeG2aC
> EPgAoJA67HOTXJljsothzYv27pxx/Lwy
> =rSbx
> -----END PGP SIGNATURE-----
> 
> -- 
> fedora-test-list mailing list
> fedora-test-list redhat com
> To unsubscribe: 
>
https://www.redhat.com/mailman/listinfo/fedora-test-list
> 

Dan,

Thank you very much.  The above commands cured the
illness, along with the su - errors as well.  

[olivares localhost ~]$ su -
Password: 
[root localhost ~]# 

Regards,

Antonio 


      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ