SElinux setup

Tor 09 Avg, 2011 10:09

There is alot of problems with SElinux.
Full of things doesn't work.

Here is a solution to make Selinux work. It is not a 100% secure because there are still open some things that shouldn't be.
But sure better than have disabled SE linux.

First the audit must run, so check if audit is running on your linux.
If there is a permission problem with audit.log files, audit will stop itself.

Second, SElinux when you doing this must have been on PERMISSIVE mode.

Than you run
ausearch -m avc -ts yesterday | audit2allow -M myfix

after that you run

semodule -i myfix.pp

to be soure that all works run again this

ausearch -m avc -ts today | audit2allow -M myfix1


and than

semodule -i myfix1.pp


If there still are some errors after repeat this steps, but everytime with higher number

myfix1
myfix2
myfix3

AFTER THAT you should enable SElinux with
setenforce 1

or edit config file in /etc/SElinux/config
and make it enforcing

After that, check if all works.....

The Trackback URL for this entry is:

http://www.povej.net/forum/trackback.php?e=1022

Avtor Objave
There are no replies for this entry.
Pokaži sporočila: