selinux ,i'm not the sysadm_t

wanghao · 10-02-2007, 09:40 PM

Excuse me trouble you.i encountered a selinux issue ,
recently the selinux always gave me warns about the
security and the solution method ,then i try to follow
the way but no use .so i reviewed some resource about
selinux and find out i root was not a member of sysadm_t(the content of highest privilege) as mine is unconfined(a type of content) that's mean
i can do nothing to change it's policy.
when entered the "newrole -r sysadm_t ",it shows not enough privilege,
oh ,what should i do ?thanks !

slimm609 · 10-03-2007, 07:24 PM

if you need to disable selinux reboot and edit the grub to boot with selinux=0 appended to the end and that will have it disabled until next reboot. That will let you change the policy. The newrole should work. That is weird that its not.