LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
LinkBack Search this Thread
Old 11-26-2012, 01:12 PM   #1
cmcnutt
LQ Newbie
 
Registered: May 2012
Posts: 22

Rep: Reputation: Disabled
How do I change label to allow write access


Dealing with a security problem on Fedora 16. These are instructions to fix problem. How do I change the label? [I am a new user.

"SELinux is preventing /usr/bin/brprintconf_dcpj125 from write access on the directory /opt/brother/Printers/dcpj125/inf.
***** Plugin catchall_labels (83.8 confidence) suggests ********************
If you want to allow brprintconf_dcpj125 to have write access on the inf directory
Then you need to change the label on /opt/brother/Printers/dcpj125/inf
restorecon -v '/opt/brother/Printers/dcpj125/inf'"
 
Old 11-26-2012, 03:47 PM   #2
blueh2o
Member
 
Registered: Jul 2011
Posts: 62

Rep: Reputation: 2
If this is some proprietary software from Brother, I'm guessing they did not include security context with their files. Since you're running SELinux, this creates an issue. Restorecon would only work if there was a context to restore to, which is doubtful. You'll have to change the context to something appropriate; see the man page for chcon.
 
Old 11-26-2012, 05:04 PM   #3
John VV
Guru
 
Registered: Aug 2005
Posts: 12,144

Rep: Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595Reputation: 1595
the SE error masage informs you to the fix
Code:
restorecon -v '/opt/brother/Printers/dcpj125/inf'
the fix in the massage works 99.999% of the time
note the SINGLE ' quote ' mark used
 
Old 11-27-2012, 06:50 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,543
Blog Entries: 51

Rep: Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606Reputation: 2606
Just in case it doesn't work minimally provide the complete /var/log/audit/audit.log message, plus 'rpm -qf /usr/bin/brprintconf_dcpj125' plus 'ls -alZ /usr/bin/brprintconf_dcpj125 /opt/brother/Printers/dcpj125/inf'.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
What does a drive label do/change? Garda Debian 4 10-21-2012 12:00 PM
[SOLVED] Change HD 'Label' nnjond Linux - Newbie 5 07-30-2011 12:49 AM
[SOLVED] is it possible to nondestructively re-write a GPT disk label? muad'dib Linux - General 1 10-01-2009 07:52 AM
How do I change the owner or get read/write access to my hd? hate29 Linux - Newbie 6 02-11-2008 12:30 PM
Write / Read a DAT (DDS 3 / 4) tape label Zxarr Linux - Software 1 02-06-2008 08:36 PM


All times are GMT -5. The time now is 05:37 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration