LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-17-2012, 03:13 AM   #1
Mike Davies
Member
 
Registered: Jul 2004
Distribution: Custom Linux 3.1/Busybox. Fedora 19, Raspberry Pi
Posts: 94

Rep: Reputation: 15
Problems with Selinux on Fedora 17


Hi,

I recently upgraded from Fedora 16 to Fedora 17. It all went well, until I wanted to ftp into my home directory. That didn't work then I rememebered I had to ...

setsebool -P ftp_home_dir=1

Unfortunately, that doesn't seem to work, it fails like ...

[root@ceri mike]# setsebool -P ftp_home_dir=1
libsepol.print_missing_requirements: mypol3's global requirements were not met: type/attribute unconfined_execmem_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).
Could not change policy booleans
[root@ceri mike]#

Other stuff fails too. If I try to load a new module then it fails in a similar fashion, e.g.

[root@ceri mike]# semodule -i test.pp
libsepol.print_missing_requirements: mypol3's global requirements were not met: type/attribute unconfined_execmem_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).
semodule: Failed!

I'm no expert on selinux. What is going on here. What is missing ?

Last edited by Mike Davies; 11-17-2012 at 04:01 AM.
 
Old 11-17-2012, 07:19 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 26,987
Blog Entries: 54

Rep: Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742Reputation: 2742
Quote:
Originally Posted by Mike Davies View Post
Code:
[root@ceri mike]# setsebool -P ftp_home_dir=1
libsepol.print_missing_requirements: mypol3's global requirements were not met: type/attribute unconfined_execmem_t (No such file or directory).
libsemanage.semanage_link_sandbox: Link packages failed (No such file or directory).
Could not change policy booleans
The print_missing_requirements message doesn't seem to relate directly to setsebool usage, at least not as far as I can see, which means there's two avenues to choose from: 0) explain what rules this "mypol3" holds and why it's needed, check all SELinux policy package were upgraded to their F17 versions, verify package contents, check if SELinux policy modules were actually loaded and analyze SELinux errors in /var/log/audit/audit.log /var/log/messages and dmesg or 1) remove all your modifications and all modules Fedora doesn't provide by default, reinstall SELinux policy packages, relabel, reboot and then check /var/log/audit/audit.log /var/log/messages and dmesg for SELinux related errors.
 
Old 11-17-2012, 09:51 AM   #3
Mike Davies
Member
 
Registered: Jul 2004
Distribution: Custom Linux 3.1/Busybox. Fedora 19, Raspberry Pi
Posts: 94

Original Poster
Rep: Reputation: 15
Thanks for the reply.

It seems that mypol3 was an old file of mine left over from years ago, so it was all my fault that I was having problems. Thanks for pointing me in the right direction.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
where is the SElinux Management in fedora 16 nkw Linux - Desktop 3 02-05-2012 08:59 PM
Fedora 12 NXServer and SELinux ericcarlson Fedora 2 12-07-2009 07:30 AM
SELinux Error :( Fedora 10 - help manuleka Linux - Newbie 6 06-02-2009 07:09 PM
Problem with SELinux on Fedora 9 nbcohen Linux - Software 3 09-21-2008 04:49 PM
fedora core 7 selinux / firewall problems akirafan Linux - Security 3 08-07-2007 02:38 AM


All times are GMT -5. The time now is 01:03 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration