Experience with SELinux enabled and targetted policy

William Hooper whooperhsd3 at earthlink.net
Mon Feb 21 22:57:08 UTC 2005


Richard E Miles said:
> On Mon, 21 Feb 2005 16:22:04 -0500 (EST)
> "William Hooper" <whooperhsd3 at earthlink.net> wrote:
>
>
>>
>> Richard E Miles said:
>>
>>> In order to understand SELinux more I enabled SELinux on my system. I
>>>  noticed a problem with access denied on portmap and ntpdate and ntpd
>>>  services.
>>
>> If you have been running the system with SELinux off then you most
>> likely have a large number of files with the incorrect context.  Take a
>> look at the "fixfiles" utility.
[snip]
> I forgot to mention that I originally set it up in permissive mode. It
> did report warnings for these services. I then ran fixfiles check. It did
> not report any problems.

So the avc errors went away after a fixfiles?

> So I guess I am still not sure whay these
> prevention warnings occured. I was just curious it someone knew and if
> there was something I could do to correct it. I can always disable
> SELinux. Should I report this as a
> bugzilla?

The fedora-selinux mailing list is the next stop before bugzilla.

-- 
William Hooper




More information about the fedora-list mailing list