LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   How do I change label to allow write access (https://www.linuxquestions.org/questions/linux-security-4/how-do-i-change-label-to-allow-write-access-4175438791/)

cmcnutt 11-26-2012 01:12 PM

How do I change label to allow write access
 
Dealing with a security problem on Fedora 16. These are instructions to fix problem. How do I change the label? [I am a new user.

"SELinux is preventing /usr/bin/brprintconf_dcpj125 from write access on the directory /opt/brother/Printers/dcpj125/inf.
***** Plugin catchall_labels (83.8 confidence) suggests ********************
If you want to allow brprintconf_dcpj125 to have write access on the inf directory
Then you need to change the label on /opt/brother/Printers/dcpj125/inf
restorecon -v '/opt/brother/Printers/dcpj125/inf'"

blueh2o 11-26-2012 03:47 PM

If this is some proprietary software from Brother, I'm guessing they did not include security context with their files. Since you're running SELinux, this creates an issue. Restorecon would only work if there was a context to restore to, which is doubtful. You'll have to change the context to something appropriate; see the man page for chcon.

John VV 11-26-2012 05:04 PM

the SE error masage informs you to the fix
Code:

restorecon -v '/opt/brother/Printers/dcpj125/inf'
the fix in the massage works 99.999% of the time
note the SINGLE ' quote ' mark used

unSpawn 11-27-2012 06:50 AM

Just in case it doesn't work minimally provide the complete /var/log/audit/audit.log message, plus 'rpm -qf /usr/bin/brprintconf_dcpj125' plus 'ls -alZ /usr/bin/brprintconf_dcpj125 /opt/brother/Printers/dcpj125/inf'.


All times are GMT -5. The time now is 10:20 AM.