Re: need howto for SELinux config--ssh on non-standard port

2010-01-14 Thread Daniel J Walsh
On 01/14/2010 10:33 AM, Paul W. Frields wrote: On Wed, Jan 13, 2010 at 07:48:24PM -0800, John Poelstra wrote: Ed Greshko said the following on 01/13/2010 06:32 PM Pacific Time: John Poelstra wrote: [r...@localhost ~]# grep ssh /var/log/audit/audit.log | audit2allow -m myssh Traceback (most

Re: need howto for SELinux config--ssh on non-standard port

2010-01-20 Thread Daniel J Walsh
On 01/19/2010 05:28 PM, John Poelstra wrote: Daniel J Walsh said the following on 01/07/2010 05:23 AM Pacific Time: On 01/06/2010 09:29 PM, John Poelstra wrote: I'm running sshd on a high (1024) port number and cannot find a clear step by step guide for configuring this correctly on Fedora 12

Re: Fedora 12 update causing SELinux alerts [SOLVED]

2010-01-20 Thread Daniel J Walsh
On 01/20/2010 04:49 PM, Roger wrote: On 01/21/2010 12:12 AM, n2xssvv.g02gfr12930 wrote: On 01/20/2010 10:15 AM, n2xssvv.g02gfr12930 wrote: After upgrading from Fedora 11 to 12 I now receive the following SELinux alerts SELinux is preventing /sbin/setfiles read access on After

Re: Fedora 12 update causing SELinux alerts [REAPPEARED]

2010-01-21 Thread Daniel J Walsh
On 01/21/2010 07:42 AM, n2xssvv.g02gfr12930 wrote: On 01/20/2010 01:12 PM, n2xssvv.g02gfr12930 wrote: On 01/20/2010 10:15 AM, n2xssvv.g02gfr12930 wrote: After upgrading from Fedora 11 to 12 I now receive the following SELinux alerts SELinux is preventing /sbin/setfiles read access on

Re: need howto for SELinux config--ssh on non-standard port

2010-01-21 Thread Daniel J Walsh
On 01/20/2010 11:35 PM, John Poelstra wrote: Daniel J Walsh said the following on 01/20/2010 11:26 AM Pacific Time: On 01/19/2010 05:28 PM, John Poelstra wrote: Daniel J Walsh said the following on 01/07/2010 05:23 AM Pacific Time: On 01/06/2010 09:29 PM, John Poelstra wrote: I'm running sshd

Re: SELinux security alert/Squid -

2010-02-08 Thread Daniel J Walsh
On 02/08/2010 03:16 PM, Bob Goodwin wrote: On 08/02/10 13:23, Daniel J Walsh wrote: . Are you sure the boolean is turned on ? # getsebool squid_connect_any squid_connect_any -- off Once you have set the boolean on it should stay that way permanently if you use the -P flag

Re: SELinux security alert/Squid -

2010-02-09 Thread Daniel J Walsh
On 02/09/2010 08:01 AM, Bob Goodwin wrote: On 09/02/10 07:36, Tim wrote: On Mon, 2010-02-08 at 16:59 -0500, Bob Goodwin wrote: I just added myaccount.wildblue.net to the Firefox no proxy for list and that seems to satisfy an access problem I didn't know I had. If that's you're

Re: GoogleEarth segfault

2010-02-24 Thread Daniel J Walsh
On 02/24/2010 01:09 PM, Matthew Saltzman wrote: On Wed, 2010-02-24 at 12:53 -0500, Matthew Saltzman wrote: I installed the latest GoogelEarth 5.1.3533 from the .bin file (over the top of an older version that I never got working either), ran restorecon on the library directory. SElinux

Re: ssh tunneling client settings

2010-02-24 Thread Daniel J Walsh
On 02/24/2010 01:32 PM, Andrew Haley wrote: On 02/24/2010 06:23 PM, Christoph Höger wrote: Am Mittwoch, den 24.02.2010, 15:57 + schrieb Andrew Haley: On 02/24/2010 02:41 PM, Christoph Höger wrote: Hi guys, are there any special client settings one needs to have for

Re: firefox lockups after update

2010-02-24 Thread Daniel J Walsh
On 02/24/2010 04:16 PM, Patrick Bartek wrote: --- On Wed, 2/24/10, Vincent Onellivone...@optonline.net wrote: --- On Tue, 2/23/10, vinnyvone...@optonline.net wrote: I submitted this problem before, I had one answer requesting the output of

Re: Dump/Restore Errors

2010-03-04 Thread Daniel J Walsh
On 03/04/2010 04:39 AM, John Austin wrote: On Wed, 3 Mar 2010, John Austin wrote: Date: Wed, 03 Mar 2010 13:06:11 + From: John Austinj...@jaa.org.uk Reply-To: j...@ee.port.ac.uk, Community support for Fedora usersusers@lists.fedoraproject.org To:

Re: SELinux Troubleshooter

2010-03-04 Thread Daniel J Walsh
On 03/04/2010 12:41 PM, Fred Williams wrote: First time posting to here, so forgive me any slight mistakes. In the past, where I've been inexperienced with an SELinux setup, I kept telling the troubleshooter to ignore alerts, rather than doing something about them and having them bother me

Re: F-12 yum update error -

2010-03-05 Thread Daniel J Walsh
On 03/05/2010 06:42 AM, Bob Goodwin wrote: . The following extracted from this morning's yum update of this F-12 system.: Updating : ModemManager-0.3-2.git20100211.fc12.x86_64 12/38 Updating : selinux-policy-targeted-3.6.32-92.fc12.noarch

Re: Problem with apache virtual host in new fedora 12 installation

2010-03-11 Thread Daniel J Walsh
On 03/10/2010 07:39 PM, Steven Stern wrote: On 03/10/2010 06:30 PM, Richard Cahilig wrote: Yes. The user apache able to access /home/user. I even tried to changed the owership to user apache and group apache but I still have error 403. On Thu, Mar 11, 2010 at 8:08 AM, Steven Stern

Re: [OT] Deafening silence

2010-03-14 Thread Daniel J Walsh
On 03/14/2010 10:37 PM, Roger wrote: On 03/14/2010 09:58 AM, Craig White wrote: On Sat, 2010-03-13 at 17:21 -0500, Marcel Rieux wrote: Honestly, I never thought that I'd find this kind of communist planned economy reasoning within the advocates of a company listed on the NYSE. Of

Re: Problem after update

2010-03-14 Thread Daniel J Walsh
On 03/14/2010 08:38 AM, ka1ifq wrote: On 12:36:44 pm Steve Searlest...@stevesearle.com said Around 05:33pm on Friday, March 12, 2010 (UK time), ka1ifq scrawled: What is the correct way to get this back working short of a reload (where I will loose all my program info)?

Re: [OT] Deafening silence

2010-03-15 Thread Daniel J Walsh
On 03/15/2010 07:10 AM, Roger wrote: well I've found the selinux list to be a much better place to get help with selinux stuff than this list but I would expect that if you had put drupal stuff into /var/www and made a soft link in /home to that directory you would have not had any issues

Re: Troubles starting fetchmail from init scripts

2010-03-20 Thread Daniel J Walsh
On 03/19/2010 08:53 PM, Jonathan Ryshpan wrote: On Fri, 2010-03-19 at 14:39 -0700, Craig White wrote: On Fri, 2010-03-19 at 14:08 -0700, Jonathan Ryshpan wrote: On Fri, 2010-03-19 at 15:02 -0500, Steven Stern wrote: On 03/19/2010 02:52 PM, Jonathan Ryshpan wrote:

Re: firefox profile synchronized w. unison cannot save anything

2010-03-24 Thread Daniel J Walsh
On 03/23/2010 10:01 PM, Vitorio Okio wrote: On Tue, 23 Mar 2010 03:48:05 +, Vitorio Okio wrote: I have 3 PCs running Hardy, Karmic, and Fedora 12, with Firefox on each of them: v. 3.0.18 on Hardy and v. 3.5.8 on both Karmic and Fedora. I created shared profile on each system and

Re: Where's Fedora Security Spin ISO

2010-03-26 Thread Daniel J Walsh
On 03/26/2010 12:05 PM, Julian Aloofi wrote: Am 26.03.2010 15:44, schrieb Athmane Madjoudj: On Fri, Mar 26, 2010 at 3:42 PM, Athmane Madjoudjathma...@gmail.com wrote: Hello everyone; I'm very interested in Fedora Security Lab/Spin because i dislike backtrack 4 after the switch

Re: Where's Fedora Security Spin ISO

2010-03-26 Thread Daniel J Walsh
On 03/26/2010 12:13 PM, Julian Aloofi wrote: Am 26.03.2010 17:10, schrieb Daniel J Walsh: Theoretically this should now work without putting SELinux in permissive mode. If it requires this, it is a bug. As far as I know, it will give an error about not being able to set the root

Re: F12 crash

2010-03-30 Thread Daniel J Walsh
On 03/30/2010 12:39 AM, Patrick Bartek wrote: --- On Mon, 3/29/10, suvayu alifatkasuvayu+li...@gmail.com wrote: On 29 March 2010 17:44, Patrick Bartekbartek...@yahoo.com wrote: ... At the first boot, before updating, disable selinux, then in the terminal ...

Re: Clamav

2010-04-15 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/15/2010 03:22 PM, Michael Miles wrote: How on earth do I set this up to get virus definitions that selinux won't jump all over I just want email scanned out and in I tried the latest 96 could only find i686 rpm for clamav, clamd,

Re: Clamav

2010-04-16 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/15/2010 05:32 PM, Michael Miles wrote: On 04/15/2010 01:09 PM, Daniel J Walsh wrote: On 04/15/2010 03:22 PM, Michael Miles wrote: How on earth do I set this up to get virus definitions that selinux won't jump all over I just want

Re: SELinux blocks access to device files when booting 2.6.32.* kernels (fc12)

2010-05-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ls -lZ /dev -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkv24OgACgkQrlYvE4MpobNQzgCg0DGF1uq/TTuEgXQDbRSJNrMA 7qwAoM0Ei47mc5dwmushd5eNQikmGs0H =X602

Re: SELinux blocks access to device files when booting 2.6.32.* kernels (fc12)

2010-05-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ls -lZ /dev -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAkv24O0ACgkQrlYvE4MpobNAPgCfQ2aPY5slIPABmtPEBf4fFd3x ic8An3NTKNlDKiLUi/9OJQ/HY1amf7hV =3RY7

Re: SELinux error booting backup f12

2010-05-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/21/2010 02:56 PM, jackson byers wrote: [by...@f12 ~]$ uname -r 2.6.32.11-99.fc12.i686.PAE login SElinux error trying to boot my backup copy of f12. Main f12 on external usb at /media/rootusb7, ext4. Backup f12copy on external usb at

Re: Problems with SELinux and cronjobs

2010-06-01 Thread Daniel J Walsh
On 05/28/2010 09:42 AM, Gijs wrote: Hello List, I'm trying to get my cronjobs to work but after reading all kinds of info on SELinux, I'm not even one step closer to solving the problem. I have the following in my cronlog (yes, SELinux is set in permissive mode, for now..): May 28 09:15:01

Re: SELinux context conflict -- default_ versus samba_share_t

2010-06-08 Thread Daniel J Walsh
On 06/08/2010 08:34 AM, Julian C. Dunn wrote: Like many Fedora users, I have a /music mount point on my fileserver. I'd like to make this available by Samba and Apache over the local LAN. I'm confused about what SELinux label I need to give this mountpoint. Currently I have it as

Re: SELinux context conflict -- default_ versus samba_share_t

2010-06-09 Thread Daniel J Walsh
On 06/09/2010 05:53 AM, Tim wrote: On Tue, 2010-06-08 at 08:34 -0400, Julian C. Dunn wrote: Jun 8 08:20:43 fileserver setroubleshoot: SELinux is preventing /usr/libexec/postfix/smtpd search access to /music. I have to ask: Why would something to do with mail be searching the drive? A

Re: FC13 Virt Win XP guest

2010-06-15 Thread Daniel J Walsh
On 06/10/2010 05:24 AM, Suvayu Ali wrote: On Thursday 10 June 2010 12:31 AM, Ken Smith wrote: Suvayu Ali wrote: On Thursday 10 June 2010 12:18 AM, Ken Smith wrote: Hi all, I've set up FC13 64bit on a machine with an intel i7 and 4G memory I'm trying to get a simple virtualisation to work.

Re: Selinux beating up on Chromium

2010-06-17 Thread Daniel J Walsh
On 06/17/2010 04:00 PM, Jim wrote: FC13/KDE setroubleshoot: SELinux is preventing /usr/lib64/chromium-browser/chrome-sandbox net_raw access . For complete SELinux messages. run sealert -l 68797c25-9748-4ab8-b020-f63a80f543a7 I run the sealert -l 68797c25-9748-4ab8-b020-f63a80f543a7 and

Re: Fedora 13, Spamassassin, and SELinux

2010-06-21 Thread Daniel J Walsh
On 06/21/2010 07:14 AM, B Wooster wrote: Just installed Fedora 13, and ran into problems with spamassassin. SELinux disallows a lot of spamassassin tasks - reporting If you want to allow spamassassin to bind to port 61706, you can execute # semanage port -a -t PORT_TYPE -p udp 61706 That of

Re: Fedora 13, Spamassassin, and SELinux

2010-06-22 Thread Daniel J Walsh
On 06/21/2010 03:40 PM, B Wooster wrote: On Mon, Jun 21, 2010 at 7:14 AM, B Woosterbwooste...@gmail.com wrote: Just installed Fedora 13, and ran into problems with spamassassin. SELinux disallows a lot of spamassassin tasks - reporting If you want to allow spamassassin to bind to port 61706,

Re: Fedora 13, Spamassassin, and SELinux

2010-06-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/22/2010 06:58 PM, B Wooster wrote: On Tue, Jun 22, 2010 at 8:14 AM, Daniel J Walsh dwa...@redhat.com wrote: Did you turn on the boolean # setsebool -P spamassassin_can_network 1 Oh yes, that seems to fix the problem - I don't see any

Re: cgi perl selinux question

2010-06-25 Thread Daniel J Walsh
On 06/23/2010 04:42 PM, Ken Smith wrote: Hi All, I'm setting up a cgi application (the Web part of the MythTV application). I'd like to try to run it with SELINUX enabled if possible. The perl script writes to STDOUT and it produces a SELINUX error that recommends executing this

Re: Another funny update?

2010-06-25 Thread Daniel J Walsh
On 06/23/2010 06:27 PM, Marcel Rieux wrote: On Tue, Jun 22, 2010 at 11:52 PM, Dennis Gilmore den...@ausil.us wrote: there are multiple ways to install nvidias drivers. Its really not simple to cover them all. some ways like using the installer directly from nvidia replace a bunch of Xorg

Re: Firefox 3.6.4 and SElinux (F12)

2010-06-25 Thread Daniel J Walsh
On 06/25/2010 10:19 AM, GianPiero Puccioni wrote: Hi, I just downloaded and installed in /usr/local Firefox 3.6.4 on a F12 and when I try to run it it gives a SElinux error: SELinux denied access requested by /usr/local/firefox/firefox-bin. /usr/local/firefox/firefox-bin is mislabeled.

Re: SSH / permissions problem

2010-07-14 Thread Daniel J Walsh
On 07/14/2010 05:23 AM, Gabriel VLASIU wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 13 Jul 2010, Gary Stainburn wrote: [g...@dcomp5 ~]$ ssh -Y -C lcomp3 -l root r...@lcomp3's password: Last login: Tue Jul 13 16:04:20 2010 from gary.ringways.co.uk [r...@lcomp3 ~]# kcalc

Re: SSH / permissions problem

2010-07-14 Thread Daniel J Walsh
On 07/14/2010 09:11 AM, Gary Stainburn wrote: On Wednesday 14 July 2010 10:23:58 Gabriel VLASIU wrote: xauth fail to regenerate the .Xauthority file because of selinux. I seen this on many F12/F13. You can test this by removing .Xauthority* files and put selinux in permissive mode. Spot

Re: F13 - Exim / SELinux Issue

2010-07-15 Thread Daniel J Walsh
On 07/14/2010 11:37 PM, Frank Chiulli wrote: I recently did a fresh install of F13 on my system. My home directory which is on a separate disk was not touched. Now whenever exim retrieves a message I get two SELinux alerts. Summary: SELinux is preventing /usr/sbin/exim getattr

Re: F13 - Exim / SELinux Issue

2010-07-15 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/15/2010 01:20 PM, Christofer C. Bell wrote: On Thu, Jul 15, 2010 at 8:38 AM, Daniel J Walsh dwa...@redhat.com wrote: On 07/14/2010 11:37 PM, Frank Chiulli wrote: Summary: SELinux is preventing /usr/sbin/exim getattr access on /home/frank

Re: Howto script sudo?

2010-07-19 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/18/2010 08:51 AM, Clemens Eisserer wrote: Hello, Is it possible to pass sudo the root-password in some way (I would prefer plaintext)? The reason is I use an umts-connection utility which has to run as root, and I don't want to have my

Re: selinux throwing incomprehensible errors when trying to run GoogleEardh

2010-07-26 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/26/2010 01:27 AM, Claude Jones wrote: It seems to be saying that the directory access requested requires labeling as usr_t, but its current type is usr_t -- it requires usr_t but it's currently labeled usr_t -- there appears to confusion

Re: selinux throwing incomprehensible errors when trying to run GoogleEardh

2010-07-26 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/26/2010 08:25 AM, Claude Jones wrote: On Mon July 26 2010, Daniel J Walsh wrote: On 07/26/2010 01:27 AM, Claude Jones wrote: It seems to be saying that the directory access requested requires labeling as usr_t, but its current type is usr_t

Re: SE Linux error in logwatch (sendmail)

2010-07-29 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/28/2010 05:29 PM, Christofer C. Bell wrote: When cron.daily runs, I get the following error related to sendmail and logwatch: /etc/cron.daily/0logwatch: Can't exec sendmail: Permission denied at /usr/sbin/logwatch line 1032, TESTFILE

Re: [F12] running psad wiht selinux on

2010-08-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/31/2010 05:55 PM, mike lan wrote: Hello is there a way to get psad running with selinux on fedora 12 ? thanks It should just work. What errors are you seeing? ausearch -m avc -ts recent Should show you selinux errors. -BEGIN

Re: flash-plugin-10.1.82.76 not working within SELinux sandbox

2010-08-11 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/11/2010 08:41 AM, Christoph A. wrote: Hi, since the flash-plugin update (v10.1.82.76) yesterday, it is not working anymore within a SELinux sandbox. If firefox is not running within a sandbox flash works fine. Has anyone experienced the

Re: security

2010-08-12 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/12/2010 08:40 AM, roland wrote: I would like to give someone a login on my server. But, I would like to limit access to his home dir. With Nautilus, Konqueror or from distance with p.e. Winscp, this person could see what he wants and do

Re: flash-plugin-10.1.82.76 not working within SELinux sandbox

2010-08-12 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/12/2010 08:18 AM, Christoph A. wrote: On 08/12/2010 03:07 PM, n...@li.nux.ro wrote: Christoph A. writes: On 08/12/2010 02:43 AM, Wolfgang S. Rupprecht wrote: Christoph A. cas...@gmail.com writes: It seams that this didn't fix it entirely

Re: Oracle 11g Client and Selinux

2010-08-12 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/10/2010 06:42 PM, Garry T. Williams wrote: I just installed the Oracle 11g client on a Fedora 13 x86_64 system. I encountered a problem, though. Here's the summary: After installation, I wanted to add the client libraries to ldconfig so I

Re: F13: httpd log errors?

2010-08-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/22/2010 02:40 PM, Daniel B. Thurman wrote: Seems there are errors spewing from httpd when starting: /etc/httpd/logs/error_log === [Sun Aug 22 11:26:15 2010] [notice] SELinux policy enabled; httpd running as context

Re: HP 6930p: mute button doesn't work properly

2010-08-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/29/2010 01:25 PM, Tim wrote: On Sat, 2010-08-28 at 20:09 +0200, Zoltan Hoppar wrote: Secondly - create an empty text file - named 'alsa-base.conf' Third - For content insert this single line without quotes - ' options snd-hda-intel

Re: SELinux

2010-08-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/29/2010 11:27 AM, Patrick Dupre wrote: Hello, With fedora 13, when I use Math:GSL, I get an error message: Can't load '/usr/local/lib/perl5/auto/Math/GSL/Errno/Errno.so' for module Math::GSL::Errno:

Re: SELINUX

2010-08-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/30/2010 08:12 AM, Patrick Dupre wrote: Hello, Trying to install the intel compiler, I get: Your system is protected with Security-enhanced Linux (SELinux). We currently support only Permissive mode, which is not found on the system. To

Re: SELinux - a call for end-of-life.

2010-09-02 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/02/2010 09:25 AM, Bruno Wolff III wrote: On Thu, Sep 02, 2010 at 08:30:29 -0400, John Mellor john.mel...@gmail.com wrote: I agree with you about the extreme cost of the relabel problem, but that may be due to a lack of knowledge on my

Re: SELinux help

2010-09-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/02/2010 08:16 PM, Chris Smart wrote: HI all, I know there's been a lot of discussion about SELinux lately, but I like it and I use it (although I'm a recent Fedora convert). However, just today I have hit a snag and I don't know to get

Re: SELinux help

2010-09-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/05/2010 07:22 PM, Chris Smart wrote: On Fri, Sep 3, 2010 at 11:15 PM, Daniel J Walsh dwa...@redhat.com wrote: I am not sure what system-config-authorization is doing, is it setting up pam_oddjob_mkhomedir or pam_mkhomedir. It would be better

Re: SELinux and HTTP Error

2010-09-13 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2010 08:05 AM, Richard Heck wrote: Anyone help me with this? I get this error every time httpd starts. This is still F12, but up to date. The info isn't that helpful, as I don't have user directories enabled in httpd.conf anyway.

Re: SELinux and HTTP Error

2010-09-14 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/14/2010 08:19 AM, Richard Heck wrote: On 09/13/2010 11:49 AM, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2010 08:05 AM, Richard Heck wrote: Anyone help me with this? I get this error every time httpd

Re: SELinux and HTTP Error

2010-09-14 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/14/2010 11:53 AM, Daniel J Walsh wrote: On 09/14/2010 08:19 AM, Richard Heck wrote: On 09/13/2010 11:49 AM, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/12/2010 08:05 AM, Richard Heck wrote: Anyone help

Re: SELinux and google-chrome Aw, Snap! crashes

2010-09-15 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/15/2010 04:39 AM, John Austin wrote: Hi I have a fully updated F13 (64bit) machines using google-chrome 6.0.472.55 beta With SELinux in Enforcing mode google-chrome will crash leaving no error messages in dmesg or /var/log/messages

Re: SELinux and google-chrome quot;Aw, Snap!quot; crashes

2010-09-16 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/16/2010 07:47 AM, Daniel J Walsh wrote: On 09/16/2010 06:04 AM, John Austin wrote: On Wed, 2010-09-15 at 13:10 +, JB wrote: John Austin ja at jaa.org.uk writes: Hi I have a fully updated F13 (64bit) machines using google-chrome

Re: SELinux and google-chrome quot;Aw, Snap!quot; crashes

2010-09-16 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/16/2010 12:23 PM, John Austin wrote: On Thu, 2010-09-16 at 11:49 -0400, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/16/2010 07:47 AM, Daniel J Walsh wrote: On 09/16/2010 06:04 AM, John Austin wrote: On Wed

Re: F13: Unable to mount ntfs-3g, option: 'context=' no longer supported?

2010-09-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/23/2010 10:53 AM, Daniel B. Thurman wrote: Some weeks ago, I have installed F13 on a system and for some time, I have successfully mounted all of my partitions as defined in my fstab file. But today, I have rebooted this F13 system and

Re: F13: Unable to mount ntfs-3g, option: 'context=' no longer supported?

2010-09-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/23/2010 02:02 PM, Daniel J Walsh wrote: On 09/23/2010 10:53 AM, Daniel B. Thurman wrote: Some weeks ago, I have installed F13 on a system and for some time, I have successfully mounted all of my partitions as defined in my fstab file

Re: VSFTPD 421 Service not availabl

2010-10-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/02/2010 10:28 PM, Aaron Gray wrote: On 3 October 2010 01:35, Sam Sharpe lists.red...@samsharpe.net wrote: On 3 October 2010 00:41, Aaron Gray aaronngray.li...@gmail.com wrote: On 2 October 2010 23:58, Aaron Gray aaronngray.li...@gmail.com

Re: Using awstats on Fedora 13

2010-10-18 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/16/2010 11:55 PM, g wrote: On 10/17/2010 12:38 AM, Michael Hannon wrote: Greetings. I'm trying to use awstats to analyze Apache log files on a Fedora 13 (x86_64) system. When I go to the web page: http://localhost/awstats/awstats.pl

Re: Using awstats on Fedora 13

2010-10-18 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/18/2010 09:30 AM, Michael Cronenworth wrote: Daniel J Walsh wrote: If I was a betting man, I would say you need to label Except, awstats already has a label. :) $ cd /usr/share/awstats/wwwroot/ $ ls -Z drwxr-xr-x. root root

Re: Cannot mount JFS partitions in Fedora 13 install

2010-10-19 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/19/2010 08:46 AM, Dotan Cohen wrote: Thanks. I don't want to mess with fstab after the fact, I am backing up the /home drive now and will convert it to ext4. If does appear that one can run Fedora with JFS but he must disable SELinux for

Re: Cannot mount JFS partitions in Fedora 13 install

2010-10-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/20/2010 04:57 AM, Dotan Cohen wrote: On Tue, Oct 19, 2010 at 15:16, Daniel J Walsh dwa...@redhat.com wrote: Please open a bug report. It turns out to be a known issue and limitation of SELinux. It's no showstopper for me now that ext4

Re: Fedora 13 Exim MTA

2010-11-01 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/01/2010 04:46 PM, Athmane Madjoudj wrote: On 11/01/2010 09:25 PM, Jeffrey Ross wrote: Trying to get Exim running on an F13 system, everything is configured except I need to add one additional non standard port for EXIM to listen on (TCP port

Re: nVidia on F14: Did I miss it?

2010-11-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/03/2010 07:44 AM, Christopher A. Williams wrote: Did I just miss the howto for installing nVidia drivers (from RPMFusion) on F14 64-bit? Seems to be a problem with the install and a script failing to launch (selinux?) to load the module.

Re: picasa does not install in F14

2010-11-10 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/10/2010 05:16 AM, Dick Roark wrote: On Wed, Nov 10, 2010 at 6:04 PM, L yuan...@gmail.com wrote: you need download picasa 3 at this site and http://picasa.google.com/linux/ yum localinstall picasa*.rpm On Wed, Nov 10, 2010 at 7:35 PM,

Re: bypassing login pam.d

2010-11-16 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/15/2010 06:07 PM, Sam Varshavchik wrote: msacks writes: I have a FC13 system that has no GUI. I'd like to bypass the login screen altogether but I'm not sure where to start. I'm looking in /etc/pam.d but I'm not sure if this is doable

Re: Problem with SELinux

2010-11-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 07:56 AM, Alan Cox wrote: On Tue, 23 Nov 2010 12:52:41 + Paul Smith phh...@gmail.com wrote: Dear All, I am experiencing the following problem with SELinux on F14: Nov 23 12:49:33 localhost kernel: [ 4881.260409] type=1400

Re: Problem with SELinux

2010-11-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 09:28 AM, Paul Smith wrote: On Tue, Nov 23, 2010 at 2:22 PM, Daniel J Walsh dwa...@redhat.com wrote: I am experiencing the following problem with SELinux on F14: Nov 23 12:49:33 localhost kernel: [ 4881.260409] type=1400 audit

Re: Sealert does not pop up as a desktop window

2010-11-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 02:48 PM, Paul Smith wrote: On Tue, Nov 23, 2010 at 7:22 PM, Thomas Cameron thomas.came...@camerontech.com wrote: I have having the following problem with sealert: # sealert could not attach to desktop process # Any ideas?

Re: iOS 4 AirPrint on F14

2010-11-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 03:06 PM, Steven Stern wrote: Wow! It was pretty easy to get this going. We can now print from our iPhones. (Whether that's a good idea is TBD.) I used this site as a guide:

Re: Sealert does not pop up as a desktop window

2010-11-23 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 04:51 PM, Paul Smith wrote: On Tue, Nov 23, 2010 at 9:42 PM, Daniel J Walsh dwa...@redhat.com wrote: I have having the following problem with sealert: # sealert could not attach to desktop process # Any ideas? sealert -b maybe

Re: Sealert does not pop up as a desktop window

2010-11-24 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/23/2010 06:07 PM, Paul Smith wrote: On Tue, Nov 23, 2010 at 10:58 PM, Daniel J Walsh dwa...@redhat.com wrote: I have having the following problem with sealert: # sealert could not attach to desktop process # Any ideas? sealert -b maybe

Re: Selinuxprevents from graphical login

2010-11-29 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/27/2010 10:37 AM, antonio montagnani wrote: antonio ha scritto / said the followingil giorno/on 27/11/2010 16:08: Chris Tyler ha scritto / said the followingil giorno/on 27/11/2010 15:58: On Sat, 2010-11-27 at 15:47 +0100, Antonio M

Re: Sealert does not pop up as a desktop window

2010-11-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/29/2010 05:19 PM, Paul Smith wrote: On Wed, Nov 24, 2010 at 1:12 PM, Daniel J Walsh dwa...@redhat.com wrote: I have having the following problem with sealert: # sealert could not attach to desktop process # Any ideas? sealert -b maybe

Re: SELinux Guide for Fedora 14

2010-11-30 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/30/2010 05:43 PM, Jorge Fábregas wrote: Hi, I noticed there's no SELinux Guide for Fedora 14. Is it that there's nothing new compared to the Fedora 13 one or is simply not ready yet? Thanks! Jorge They should not be version centric,

Re: F14: can't get java running

2010-12-06 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/06/2010 02:30 PM, Tony Camuso wrote: What do you see when you run the following ? # java -version java version 1.6.0_22 Java(TM) SE Runtime Environment (build 1.6.0_22-b04) Java HotSpot(TM) Server VM (build 17.1-b03, mixed mode) What

Re: F14: can't get java running

2010-12-06 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/06/2010 04:15 PM, Fernando Cassia wrote: On Mon, Dec 6, 2010 at 5:25 PM, Mauriat Miranda mli...@mjmwired.com wrote: On Mon, Dec 6, 2010 at 2:30 PM, Tony Camuso tcam...@redhat.com wrote: Did you get an SELinux alert or warning ? No SELinux

Re: 5 Beginner questions regarding Fedora 14

2010-12-08 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/08/2010 07:00 AM, Tim wrote: On Wed, 2010-12-08 at 01:51 -0800, S Mathias wrote: http://fedoraproject.org/wiki/Flash Theres no exact documentation for Fedora 14. So I went to: http://get.adobe.com/flashplayer/ Selected YUM for

Re: caching-nameserver SELinux

2010-12-13 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/13/2010 03:41 PM, S Mathias wrote: i just wanted to install a local caching dns name server: yum -y install caching-nameserver but it can't start, because SELinux is preventing it: http://pastebin.com/raw.php?i=V9GK49mJ I already

Re: caching-nameserver SELinux

2010-12-14 Thread Daniel J Walsh
. --- On Mon, 12/13/10, Daniel J Walsh dwa...@redhat.com wrote: From: Daniel J Walsh dwa...@redhat.com Subject: Re: caching-nameserver SELinux To: Community support for Fedora users users@lists.fedoraproject.org Cc: S Mathias smathias1...@yahoo.com Date: Monday, December 13, 2010, 8:49 PM

Re: disable given SELinux messages/gui

2010-12-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/19/2010 04:56 PM, S Mathias wrote: after i: yum install privoxy chkconfig --level 5 privoxy on and yum -y install caching-nameserver chkconfig --level 5 named on rebooted: http://img217.imageshack.us/img217/3205/selinux.png

Re: Help. Motherboard changed. Everything is fine except eth0.

2011-01-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/29/2010 10:52 PM, Tom Horsley wrote: On Wed, 29 Dec 2010 23:32:57 -0200 Lucélio Gomes de Freitas wrote: I found out that was also necessary to change the eth0 MAC using system-config-network. Could be, especially if you are using

Re: ssh by user amandabackup

2011-01-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/02/2011 11:43 AM, Matthew Saltzman wrote: On Sun, 2011-01-02 at 10:09 +0100, François Patte wrote: Le 02/01/2011 02:14, Matthew Saltzman a crit : I'm trying to set up amanda using the amaddclient command. That requires that user

Re: ssh by user amandabackup [SOLVED]

2011-01-04 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/04/2011 04:08 AM, Gordon Messmer wrote: On 01/02/2011 06:45 AM, Matthew Saltzman wrote: Aha! In /var/log/messages, on the other hand, this happens: Jan 2 09:40:36 yankee setroubleshoot: SELinux is preventing /usr/sbin/sshd from

Re: ssh by user amandabackup [SOLVED]

2011-01-04 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/04/2011 11:33 AM, Matthew Saltzman wrote: On Tue, 2011-01-04 at 09:11 -0500, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/04/2011 04:08 AM, Gordon Messmer wrote: On 01/02/2011 06:45 AM, Matthew Saltzman wrote

Re: ssh by user amandabackup [SOLVED]

2011-01-04 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/04/2011 11:54 AM, Matthew Saltzman wrote: On Tue, 2011-01-04 at 11:45 -0500, Daniel J Walsh wrote: You would need the combination of relabeling the homedir and searching /var/lib/amanda. WHich is what we will be adding to policy. Ah, I

Re: SELinux

2011-01-20 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/20/2011 04:17 PM, Kostas Sfakiotakis wrote: snip Using evince would be an improvement, but I wouldn't trust it to read PDFs that I thought had a significant chance of being trojans. sandbox -X evince random.pdf On Fedora or RHEL6,

Re: SELinux

2011-01-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/20/2011 05:12 PM, Jorge Fábregas wrote: On 01/20/2011 05:23 PM, Daniel J Walsh wrote: yum install policycoreutils-sandbox Shouldn't this package be a dependency of the package policycoreutils-python (owner of sandbox)? -- Jorge

Re: SELinux

2011-01-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/20/2011 05:12 PM, Genes MailLists wrote: On 01/20/2011 05:02 PM, Genes MailLists wrote: On 01/20/2011 04:23 PM, Daniel J Walsh wrote: If I want to run google chrome (say)- I tried this: mkdir -p sandbox-home/.config rsync -av

Re: SELinux

2011-01-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/21/2011 08:31 AM, John Austin wrote: On Fri, 2011-01-21 at 07:42 -0500, Daniel J Walsh wrote: On 01/20/2011 05:12 PM, Genes MailLists wrote: On 01/20/2011 05:02 PM, Genes MailLists wrote: On 01/20/2011 04:23 PM, Daniel J Walsh wrote

Re: SELinux

2011-01-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/21/2011 09:12 AM, John Austin wrote: On Fri, 2011-01-21 at 08:49 -0500, Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/21/2011 08:31 AM, John Austin wrote: On Fri, 2011-01-21 at 07:42 -0500, Daniel J Walsh wrote

  1   2   3   4   5   >