Strict policy on FC6 and F7

[shintaro_fujiwara]

2007-08-07 (火) の 09:48 -0700 に Hal さんは書きました:
> Hallo 
> 
> After a problem with the strict policy in FC6: firefox does not start under
> strict policy. No messages at all. I decided to check if firefox under strict
> policy on F7 works. 
> I have installed F7 and enabled strict policy. But from now on I can no longer
> login in enforcing is on . When I enter username and password and I get
> permission denied even for root in GDM. In console I just get new "username"
> prompt.
> 
> I do not understand why firefox does not start in fc6 and 
> can not longin on F7 under strict policy?
>  
> What might be wrong? 
> Because, now you're in enforcing mode,
please disable SELinux and login.
Install devel policy.

#yum install selinux-policy-devel

Please install this module.

#vim local.te

module local 1.0;

require {
        type local_login_t;
        class netlink_audit_socket { append bind connect shutdown ioctl
getattr
setattr shutdown getopt setopt write nlmsg_relay nlmsg_read create
read };
}

logging_send_audit_msg(local_login_t)
logging_set_loginuid(local_login_t)

#make -f /usr/share/selinux/devel/Makefile local.pp
#semodule -i local.pp
#semodule -l|grep local

Set SELinux enforcing.

Did it work?


> Hal
> 
> 
> 
> 
> 
>       ____________________________________________________________________________________
> Luggage? GPS? Comic books? 
> Check out fitting gifts for grads at Yahoo! Search
> http://search.yahoo.com/search?fr=oni_on_mail&p=graduation+gifts&cs=bz
> 
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list