Re: [CentOS] CentOS 7, selinux and pop_port_t

2021-02-12 Thread Leon Fauster via CentOS
Am 12.02.21 um 04:27 schrieb H: I am muddling my way through learning selinux when installing a webapp with httpd as the webserver running CentOS 7. The app allows the user to send/receive mail etc but it seems that I have yet to allow access to imap port 993. So far it seems this is configure

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-28 Thread Orion Poplawski
On 2/26/20 9:52 AM, Nicolas Kovacs wrote: Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : SELinux is preventing /usr/bin/python2.7 from read access on the file disable. *  Plugin catchall (100. confidence) suggests   * If you believe that python2.7 should be allowed read access on the

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-27 Thread Louis Lagendijk
On Thu, 2020-02-27 at 02:49 -0800, Mark Milhollan wrote: > On Wed, 26 Feb 2020, Nicolas Kovacs wrote: > > > Some time ago I had SELinux problems with Fail2ban. > > Unfortunately when I install [...] from EPEL, I still get the same > > error. > > EPEL packages are often crap quality (as packages),

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-27 Thread Mark Milhollan
On Wed, 26 Feb 2020, Nicolas Kovacs wrote: Some time ago I had SELinux problems with Fail2ban. Unfortunately when I install [...] from EPEL, I still get the same error. EPEL packages are often crap quality (as packages), merely blind imports of the upstream package without any adjustments

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-26 Thread Orion Poplawski
On 2/26/20 12:15 PM, Stephen John Smoogen wrote: On Wed, 26 Feb 2020 at 14:06, Jonathan Billings wrote: On Feb 26, 2020, at 08:52, Nicolas Kovacs wrote: Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : SELinux is preventing /usr/bin/python2.7 from read access on the file disable. * P

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-26 Thread Benson Muite
On Wed, Feb 26, 2020, at 10:15 PM, Stephen John Smoogen wrote: > On Wed, 26 Feb 2020 at 14:06, Jonathan Billings wrote: > > > On Feb 26, 2020, at 08:52, Nicolas Kovacs wrote: > > > > > >> Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : > > >> SELinux is preventing /usr/bin/python2.7 from read

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-26 Thread Stephen John Smoogen
On Wed, 26 Feb 2020 at 14:06, Jonathan Billings wrote: > On Feb 26, 2020, at 08:52, Nicolas Kovacs wrote: > > > >> Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : > >> SELinux is preventing /usr/bin/python2.7 from read access on the file > disable. > >> * Plugin catchall (100. confidence) s

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-26 Thread Jonathan Billings
On Feb 26, 2020, at 08:52, Nicolas Kovacs wrote: > >> Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : >> SELinux is preventing /usr/bin/python2.7 from read access on the file >> disable. >> * Plugin catchall (100. confidence) suggests * >> If you believe that python2.7 should be allow

Re: [CentOS] CentOS 7 : SELinux trouble with Fail2ban

2020-02-26 Thread Nicolas Kovacs
Le 26/02/2020 à 11:51, Nicolas Kovacs a écrit : SELinux is preventing /usr/bin/python2.7 from read access on the file disable. *  Plugin catchall (100. confidence) suggests   * If you believe that python2.7 should be allowed read access on the disable file by default. Then you should

Re: [CentOS] CentOS 7 selinux

2017-05-10 Thread Larry Martell
On Wed, May 10, 2017 at 9:30 AM, Peter Eckel wrote: > Hi Larry, > > > If I make a change to /etc/sysconfig/selinux do I have to restart > anything > > for the change to take effect? > > It depends. > > If you are changing the SELinux mode from 'enforcing' to 'permissive' and > vice versa, you can

Re: [CentOS] CentOS 7 selinux

2017-05-10 Thread Jonathan Billings
On Tue, May 09, 2017 at 02:27:27PM -0600, Warren Young wrote: > Isn’t the correct answer “yes” for every single file under that > directory? > > If it were otherwise, you’d have services continually restarting to > look for updated settings. Then because of all the resulting > inadvertent lock-

Re: [CentOS] CentOS 7 selinux

2017-05-10 Thread Peter Eckel
Hi Larry, > If I make a change to /etc/sysconfig/selinux do I have to restart anything > for the change to take effect? It depends. If you are changing the SELinux mode from 'enforcing' to 'permissive' and vice versa, you can make that change active in the running system by issuing the 'sete

Re: [CentOS] CentOS 7 selinux

2017-05-09 Thread Warren Young
On May 9, 2017, at 12:14 PM, Larry Martell wrote: > > If I make a change to /etc/sysconfig/selinux do I have to restart anything > for the change to take effect? Isn’t the correct answer “yes” for every single file under that directory? If it were otherwise, you’d have services continually rest

Re: [CentOS] CentOS 7, selinux issue

2016-04-06 Thread Daniel J Walsh
Can you attach one of the AVC's. Mos likely ssh-x509-auth needs to be labeled sshd_key_t or ssh_home_t On 04/06/2016 02:54 PM, m.r...@5-cent.us wrote: I'm seeing a lot of noise in the logs, to the effect of: setroubleshoot: SELinux is preventing /bin/ksh93 from write access on the directory /va

Re: [CentOS] CentOS 7 SELinux issue

2016-02-25 Thread Steve Snyder
On 02/25/2016 07:23 AM, Brandon Vincent wrote: On Thu, Feb 25, 2016 at 12:34 AM, Frank Cox wrote: Turns out you get the "Could not downgrade policy file /etc/selinux/targeted/policy/policy.24" error if you're running with SELinux disabled and something tries to install or reload policy: semo

Re: [CentOS] CentOS 7 SELinux issue

2016-02-25 Thread Brandon Vincent
On Thu, Feb 25, 2016 at 12:34 AM, Frank Cox wrote: > Turns out you get the "Could not downgrade policy file > /etc/selinux/targeted/policy/policy.24" error if you're running with SELinux > disabled and something tries to install or reload policy: semodule -vR does > it. This is why if anyone i

Re: [CentOS] CentOS 7 SELinux issue

2016-02-24 Thread Alice Wonder
On 02/24/2016 11:34 PM, Frank Cox wrote: On Wed, 24 Feb 2016 23:28:33 -0800 Alice Wonder wrote: I don't ordinarily run SELinux and do not have it enabled. https://lists.fedoraproject.org/pipermail/selinux/2012-May/014626.html QUOTE: Turns out you get the "Could not downgrade policy file /et

Re: [CentOS] CentOS 7 SELinux issue

2016-02-24 Thread Frank Cox
On Wed, 24 Feb 2016 23:28:33 -0800 Alice Wonder wrote: > I don't ordinarily run SELinux and do not have it enabled. https://lists.fedoraproject.org/pipermail/selinux/2012-May/014626.html QUOTE: Turns out you get the "Could not downgrade policy file /etc/selinux/targeted/policy/policy.24" error

Re: [CentOS] CentOS 7 selinux policy bug

2015-05-30 Thread Daniel J Walsh
On 05/29/2015 09:20 AM, m.r...@5-cent.us wrote: > Hi, folks, > >CentOS 7.1. Selinux policy, and targetted, updated two days ago. > > May 28 17:02:41 python: SELinux is preventing /usr/bin/bash > from execute access on the file /usr/bin/bash.#012#012* <...> > May 28 17:02:45 python: SELi

Re: [CentOS] CentOS 7 selinux policy bug

2015-05-29 Thread m . roth
gt; > -Original Message- > From: centos-boun...@centos.org [mailto:centos-boun...@centos.org] On > Behalf Of Earl A Ramirez > Sent: Friday, May 29, 2015 10:53 AM > To: CentOS mailing list > Subject: Re: [CentOS] CentOS 7 selinux policy bug > > On 29 May 2015 at 16:27

Re: [CentOS] CentOS 7 selinux policy bug

2015-05-29 Thread Conley, Matthew M CTR GXM
Subject: Re: [CentOS] CentOS 7 selinux policy bug On 29 May 2015 at 16:27, wrote: > Hi, folks, > >CentOS 7.1. Selinux policy, and targetted, updated two days ago. > > May 28 17:02:41 python: SELinux is preventing > /usr/bin/bash from execute access on the file > /

Re: [CentOS] CentOS 7 selinux policy bug

2015-05-29 Thread Earl A Ramirez
On 29 May 2015 at 16:27, wrote: > Hi, folks, > >CentOS 7.1. Selinux policy, and targetted, updated two days ago. > > May 28 17:02:41 python: SELinux is preventing /usr/bin/bash > from execute access on the file /usr/bin/bash.#012#012* <...> > May 28 17:02:45 python: SELinux is preventin