"Could not change policy booleans"

Steve G linux_4ever at yahoo.com
Sun Jun 3 13:05:33 UTC 2007


>So I tried this (as root):
>/usr/sbin/setsebool -P httpd_can_network_connect=1
>But than I get "Could not change policy booleans".

That should have worked. That should be the correct syntax. Was there an avc
associated with trying to set this? Also, are you completed updated on selinux
packages?

>This works:
> /usr/sbin/setsebool httpd_can_network_connect=1
>I could put this into a boot script ;)

You shouldn't have to do that. I just checked this on a fully updated fc6 machine
and it works fine.

>In /var/log/messages, I get the following entry:
> Jun  3 00:02:56 localhost dbus: Can't send to audit system: USER_AVC
>avc:  received policyload notice (seqno=3) : exe="/bin/dbus-daemon"
>(sauid=500, hostname=?, addr=?, terminal=?)

That should have been solved by an update to dbus in fc6 a month ago. What Fedora
release are you running? Are you completely updated?

-Steve


       
____________________________________________________________________________________
Pinpoint customers who are looking for what you sell. 
http://searchmarketing.yahoo.com/




More information about the fedora-selinux-list mailing list