FC5 + SElinux

Kaula · 09-19-2006, 07:26 PM

Hi,

I'm having a problem changing the SElinux settings while logged in as root in gnome.

Under "Security Level and Firewall" on the SElinux tab, when Enforcing is selected I'm unchecking things that cant be turned on, primarly for now I need the ftp support disabled. I'll uncheck what I want, click "ok" the dialog box closes, but nothing has changed. I reopen the "Security Level and Firewall" and the options I just unchecked are rechecked!

Any ideas what I can do?

Thanks,
Paul

stormtracknole · 09-19-2006, 07:32 PM

I am not 100% sure, but I think you may have to do a full reboot for changes to take effect. But again, I'm not sure.

Kaula · 09-19-2006, 07:48 PM

Even after a reboot, the settings havnt changed, they are the same as they were before I unchecked them

stormtracknole · 09-19-2006, 07:56 PM

Quote:

Originally Posted by Kaula

Even after a reboot, the settings havnt changed, they are the same as they were before I unchecked them

Ok, try this. As root do "vi /etc/selinux/targeted/booleans"

Look for the setting that you wish to change. Reboot, and check again. Let me know how that works. That is about the only other way that I know to make changes. Hope it works!

Kaula · 09-19-2006, 08:25 PM

I dont seem to have that file, though I do have a /selininux/booleans/ with a bunch of files in it

Do you know if there is another file that might contain all the on/off settings for its modules?

FC5.0 SElinux-policy 2.2.23-15

stormtracknole · 09-19-2006, 08:31 PM

Quote:

Originally Posted by Kaula

I dont seem to have that file, though I do have a /selininux/booleans/ with a bunch of files in it

Do you know if there is another file that might contain all the on/off settings for its modules?

FC5.0 SElinux-policy 2.2.23-15

Yes, look under that file. The 0 equals disabled while 1 means enabled. Do a search for the file that you are looking.