________________________________
From: Beartooth <beartooth@comcast.net>
To: centos@centos.org
Sent: Thursday, July 26, 2012 12:25 PM
Subject: [CentOS] SELinux in CentOS 6


>*** It keeps butting in when I try to install map software from Garmin
> under Wine. I'm not nearly competent not willing to apply the remedy it
> suggests. How do I get to someplace where I can disable it, or at least
> set it to permissive?

_______________________________________________

You can edit the /etc/selinux/config

..but I anticipate this thread will spawn yet another instance of "SELinux Wars.."



*If life gives you lemons, keep them-- because hey.. free lemons.
"~heart~ Sticker"* fixer:* http://microflush.org/stuff/stickers/heartFix.html
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

2012/7/26 Beartooth <beartooth@comcast.net>:
>
> It keeps butting in when I try to install map software from Garmin
> under Wine. I'm not nearly competent not willing to apply the remedy it
> suggests. How do I get to someplace where I can disable it, or at least
> set it to permissive?
>
> _______________________________________________
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos

edit /etc/selinux/config
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

From: Beartooth <beartooth@comcast.net>

> *** It keeps butting in when I try to install map software from Garmin
> under Wine. I'm not nearly competent not willing to apply the remedy it
> suggests. How do I get to someplace where I can disable it, or at least
> set it to permissive?

Not an selinux expert at all but maybe look for "permissive domains"...

JD
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

John Doe wrote:

> From: Beartooth <beartooth@comcast.net>
>
>> It keeps butting in when I try to install map software from Garmin
>> under Wine. I'm not nearly competent not willing to apply the remedy it
>> suggests. How do I get to someplace where I can disable it, or at least
>> set it to permissive?
>
> Not an selinux expert at all but maybe look for "permissive domains"...

As others have said, edit /etc/selinux/config as root & set to
permissive as opposed to enforcing & then reboot for the changes to take
effect.

It's not a good idea to disable it completely due to the kernel & labels
& so on but if you're on a home network on a private LAN behind a NAT
router, setting permissive shouldn't cause you any security problems.

Cheers,

Phil...

- --
currently (ab)using
CentOS 6.2, Debian Squeeze, Fedora Beefy, OS X Snow Leopard, Ubuntu Precise

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: §auto-key-locate cert pka ldap hkp://keys.gnupg.net
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJQEpHuAAoJEKuJdOaOnmMJyUsH/1aIweVKvf/7RnZ4kX5hiZLY
CxgorSwKg8ftv/eN5N4U5BXTnfBjdSwqbo4opLD4tUVtIwTMiAHYxS36orJ+90TS
1K4CVtj1RGS3ctC5ZlWA6PcEF7bGj8UZg+d7a8F7Iw16wDktbk JMz4BKr+zDnzvg
8uqrgq5YoKhFOvIhmryV4b3mMJ31lX2wMnYJw2Ec/6MQ5o1kzuaWnvFmfN8k6xGz
zaBuxgdGpfbe5kvTTVDm2RvZhzw2DbpD2Rrp7OJcUkezNIqH1M OSOiz3JZ9qqzdx
Dy0S6J8TBpM7DDmu//aeubdXg1fYN2dc3/NictiYpDAokQqXFtqzPz82j6MWxZQ=
=ffuF
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

>
> As others have said, edit /etc/selinux/config as root & set to
> permissive as opposed to enforcing & then reboot for the changes to take
> effect.
>

Unless you are switching between permissive/enforcing and disabled (or
vice-versa) you done need a reboot - just use setenforce to change the
running behaviour...

Also as usual in the redhat world look to /ets/sysconfig/selinux ...
although in this case that's just a symlink to /etc/selinux/config I
have been tripped up on more than one occasion with only editing stuff
in /etc and then wondering why behaviour is not as expected... and as
such find it good practice to get in the habit of checking
/etc/sysconfig before doing straight to the other /etc/<service>
files....
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/27/2012 05:22 AM, John Doe wrote:
> From: Beartooth <beartooth@comcast.net>
>
>> It keeps butting in when I try to install map software from Garmin under
>> Wine. I'm not nearly competent not willing to apply the remedy it
>> suggests. How do I get to someplace where I can disable it, or at least
>> set it to permissive?
>
> Not an selinux expert at all but maybe look for "permissive domains"...
>
> JD _______________________________________________ CentOS mailing list
> CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
>
What is setroubleshoot suggesting? Wine requires you to turn on the mmap boolean.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAlASolwACgkQrlYvE4MpobPygwCeKksXXOpgpn gR89ylI5j8vRel
OgAAoKhC5jmPM6NVNfIpFcRyobAIoAuC
=EqLY
-----END PGP SIGNATURE-----
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

If you temporarily want SELinux permissive and plan on fixing it with
a custom policy module, run `setenforce 0`. Check to see the SELinux
status with `getenforce`. And you can check /var/log/audit/audit.log
to see what SELinux is saying.

I'm more inclined these days to put together policy modules rather
than _forever_ setting it to permissive (unless you get logwatch
reports on it, SELinux might as well be disabled completely).

Set SELinux to permissive, get your application configured and
working, then come back and use the items logged while set to
permissive to generate a policy module.

---~~.~~---
Mike
// SilverTip257 //


On Thu, Jul 26, 2012 at 3:25 PM, Beartooth <beartooth@comcast.net> wrote:
>
> It keeps butting in when I try to install map software from Garmin
> under Wine. I'm not nearly competent not willing to apply the remedy it
> suggests. How do I get to someplace where I can disable it, or at least
> set it to permissive?
>
> _______________________________________________
> CentOS mailing list
> CentOS@centos.org
> http://lists.centos.org/mailman/listinfo/centos
_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

Phil Dobbin wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> John Doe wrote:
>
>> From: Beartooth <beartooth@comcast.net>
>>
>>> It keeps butting in when I try to install map software from Garmin
>>> under Wine. I'm not nearly competent not willing to apply the remedy it
>>> suggests. How do I get to someplace where I can disable it, or at least
>>> set it to permissive?
>>
>> Not an selinux expert at all but maybe look for "permissive domains"...
>
> As others have said, edit /etc/selinux/config as root & set to
> permissive as opposed to enforcing & then reboot for the changes to take
> effect.
<snip>
Or, if you don't want to reboot just now, as root, run setenforce 0, or
echo 0 > /selinux/enforce, which will set it to permissive.

mark

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos