Selinux fun

Craig White craig at tobyhouse.com
Fri Nov 9 20:46:11 UTC 2007


On Fri, 2007-11-09 at 13:10 -0700, Karl Larsen wrote:
> Daniel J Walsh wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > Karl Larsen wrote:
> >   
> >> Mike A. Harris wrote:
> >>     
> >>> Karl Larsen wrote:
> >>>       
> >>>>    On F8 I left selinux set up as protection. Today I was d/l the
> >>>> many files needed to support the VLC viewer. I got a selinux message
> >>>> saying it was not allowing certain files to be installed. That is
> >>>> when I turned off selinux.
> >>>>
> >>>> How can anyone be expected to use this software when it screws up
> >>>> everything your trying to do?
> >>>>         
> >>> Install 'setroubleshoot', that makes it a breeze.  If you find any
> >>> real bugs in the default SElinux policies, be sure to file a bug
> >>> report in bugzilla against "selinux-policy" so that it gets fixed in
> >>> the next update.  The SElinux folk are pretty responsive these days
> >>> with updates.
> >>>
> >>>       
> >>    Hi saw settroubleshoot and it was a big 2 page thing. It listed just
> >> about all I did today on F8.
> >>
> >>    I then went to my F7-64 and got all the VLC files in and it works. I
> >> got no complaint from selinux which is full on in that system. I really
> >> can't tell what is going on with selinux but for sure it is not the same
> >> on all three systems on this computer.
> >>
> >>
> >>
> >>     
> > Most likely you have a labeling problem on the system with it blocking.
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.7 (GNU/Linux)
> > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> >
> > iD8DBQFHNLonrlYvE4MpobMRApsPAJ9OGnYzgRyDv8KK3AEZ+aVgnNTx2gCeM5Pl
> > zwxOm7om5FhJu6Zg438InS4=
> > =xzuM
> > -----END PGP SIGNATURE-----
> >
> >   
>     There is no label problem and that I will address as time allows. I 
> plan to re-label all three systems next week. They will all have system 
> specific names. The problem I had was that I saw the panel that selinux 
> put up and it said these listed files have not been allowed, but I 
> checked and they are all there. I was not ready to field the panel that 
> came up. I will turn selinux back on soon.
> 
>     I have had zero problems with my F7-64 system which has selinux 
> turned full on.
> 
>     F8 has been all a good experience and it appears to be at least a 
> fully updated F7 in performance. I was able to get the stuff working 
> that I need in a home operating system. It reads all my USB things and 
> it has VLC working like it must since I get a bunch movies from friends 
> with Windows. So my Linux must be as good as Windows.
> 
>     So in good time I expect to shift my daily computer work to F8.
----
vintage Karl...telling Daniel Walsh that he doesn't have a label
problem.

For a moment, I thought Daniel was going to offer to help Karl.

Craig




More information about the fedora-list mailing list