LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 08-12-2015, 04:23 PM   #1
ccunlimited
Member
 
Registered: May 2015
Posts: 40

Rep: Reputation: Disabled
Need help to change selinux mls policy range with correct steps


i install selinux on my os to provide more security , i work wit policy mls i want to change my selinux policy mls level and range , i followed the manual pages to use:

# sudo semanage user

# sudo semanage login

# sudo runcon

i succeded to change the mls level and range but i face the probleme in the end that my user login not have a valid context it changed from user_r to system_u i try to find why this happen and which mistake i did here the output of my semanage user -l

root sysadm s0 s0-s15:c0.c1023 auditadm_r staff_r secadm_r sysadm_r system_r
staff_u staff s0 s0-s15:c0.c1023 auditadm_r staff_r secadm_r sysadm_r
sysadm_u sysadm s0 s0-s15:c0.c1023 sysadm_r
system_u user s0 s0-s15:c0.c1023 system_r
unconfined_u unconfined s0 s0-s15:c0.c1023 system_r unconfined_r
user_u user s0 s0-s15:c0.c1023 user_r

I changed the all account above plus my login range i run after

#sudo genhomedircon

# sudo touch /.autorelabel

# sudo reboot

But i arrive in the end with invalid id -Z its changed from user_r to system_u and there is no relabel with new level and ranges any suggestions
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
selinux mls labeling paul2015 Linux - Security 1 06-22-2015 01:11 AM
How to implement and configure MLS (BLP model) in SELinux? amoya Linux - Security 3 04-18-2015 11:13 AM
Fedora 16: Could not downgrade policy file (selinux-policy-targeted) coreychch Fedora 1 06-29-2012 02:33 AM
SELinux MLS messing me up? jnojr Linux - Security 2 01-27-2009 02:49 PM
SELinux MLS slimm609 Linux - Security 6 08-26-2007 03:50 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:42 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration