Re: [CentOS] SELinux upgrade

2017-01-19 Thread Daniel J Walsh
On 01/19/2017 08:57 AM, Marcin Trendota wrote: > W dniu 19.01.2017 o 14:54, Johnny Hughes pisze: > >>> So, it looks like something with docker-selinux and container-selinux... >> Right, I wanted to mention that docker-selinux was replaced with >> container-selinux in the lasest version. >

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Gordon Messmer
On 01/19/2017 12:43 AM, Marcin Trendota wrote: After recent system upgrade (this night) i lost access to two servers through SSH, because of change in SELinux policy - i have ssh there on different port and now it's gone. Which release? I also run ssh on an alternate port on one host, and

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Marcin Trendota
W dniu 19.01.2017 o 14:54, Johnny Hughes pisze: >> So, it looks like something with docker-selinux and container-selinux... > Right, I wanted to mention that docker-selinux was replaced with > container-selinux in the lasest version. Shouldn't be docker-selinux automatically removed then? --

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Johnny Hughes
On 01/19/2017 04:47 AM, Marcin Trendota wrote: > W dniu 19.01.2017 o 10:17, Hal Wigoda pisze: >> I have experienced this myself. It is very upsetting. > > > It happened on servers with docker installed. I got error message there: > # semanage port -a -t ssh_port_t -p tcp > Re-declaration of

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Marcin Trendota
W dniu 19.01.2017 o 10:17, Hal Wigoda pisze: > I have experienced this myself. It is very upsetting. It happened on servers with docker installed. I got error message there: # semanage port -a -t ssh_port_t -p tcp Re-declaration of type docker_t Failed to create node Bad type declaration at

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Hal Wigoda
I have experienced this myself. It is very upsetting. (Sent from iPhone, so please accept my apologies in advance for any spelling or grammatical errors.) > On Jan 19, 2017, at 2:57 AM, Fabian Arrotin wrote: > > log ___ CentOS

Re: [CentOS] SELinux upgrade

2017-01-19 Thread Fabian Arrotin
On 19/01/17 09:43, Marcin Trendota wrote: > Hello All > > After recent system upgrade (this night) i lost access to two servers > through SSH, because of change in SELinux policy - i have ssh there on > different port and now it's gone. > > Thanks to puppet i was able to change SSH port back to