rpmverify output
Emanuele Maiarelli
emanuele at nettirrena.it
Wed Jul 11 11:47:52 UTC 2007
i try both ways (fixfiles / touch /.autorelabel n reboot),
but rpmverify still state ........C.
SELinux is actived, i post the conffile
---/etc/sysconfig/selinux---
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=permissive
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted
----------------------------
maybe is dued by the SELINUXTYPE=targeted ?
> On Tue, 10 Jul 2007 22:49:36 +0200 (CEST)
> "Emanuele Maiarelli" <emanuele at nettirrena.it> wrote:
>
>> after running 'fixfiles relabel' rpmverify still report the flag,
>> have it to reboot?
>
> It's typically better to use the 'touch /.autorelabel' and reboot than
> to use fixfiles. I suppose you could also try the 'fixfiles -Ra
> restore' command. That should restore selinux contexts from the rpm
> database.
>
> Do you have selinux enabled? If you are disabling it
> (see /etc/sysconfig/selinux) then it's not going to be able to relabel
> the files since it's turned off.
>
> kevin
>
>
--
Emanuele Maiarelli
Nettirrena s.r.l. LUCCA IT
http://www.nettirrena.it
emanuele at nettirrena.it
tel. +39 0583 312257
fax. +39 0583 316373
More information about the Fedora-security-list
mailing list