Policies for bastille?

R. Jensen linuxuser at rhjensen.com
Fri Mar 4 22:23:26 UTC 2005


I recently downloaded Bastille and was unable to get
the PSAD portion to install. [Bastille is trying to
install /usr/sbin/psad (among others)].

[root at lankhmar log]# ls -ldZ /usr/sbin
drwxr-xr-x  root     root     system_u:object_r:sbin_t

So I would *expect* an SELinux error if the psad isn't of sbin_t.
[But I don't see any avc messages in the log.]

Here's a portion of Bastille's error log:

{Fri Mar  4 11:15:28 2005} Failed to place /psad as /usr/sbin/psad
{Fri Mar  4 11:15:28 2005} #ERROR: chmod: File /usr/sbin/psad doesn't exist!
{Fri Mar  4 11:15:28 2005} Failed to place /psadwatchd as
/usr/sbin/psadwatchd
{Fri Mar  4 11:15:28 2005} #ERROR: chmod: File /usr/sbin/psadwatchd
doesn't exist!
{Fri Mar  4 11:15:28 2005} Failed to place /kmsgsd as /usr/sbin/kmsgsd
{Fri Mar  4 11:15:28 2005} #ERROR: chmod: File /usr/sbin/kmsgsd doesn't
exist!

Does this look like an SELinux issue or just Bastille?

Richard.




More information about the fedora-selinux-list mailing list