selinux issues in Fedora core 4

3 posts / 0 new
Last post
#1 Thu, 07/06/2006 - 07:02
RichardSydney-Smith

selinux issues in Fedora core 4

I have just spent a number of hours wondering why a fedora core 4 system would not let dovecot login or access /home/*/public_html directories.

Suggest that the install for virtualmin update the security model for selinux.

Thu, 07/06/2006 - 11:48
Joe
Joe's picture

Hey Richard,

Something must have gone wrong during your installation, as SELinux is disabled during the installation process if it completes successfully.

I'll have to do some testing to see if I can see this happen, as you're not the first to bring it up.

Modifying policy is getting closer to possible with Fedora Core 4 and 5 (and Jamie has added a bit of that already)...but even with modifications, there are very likely to be issues with CGI scripts. I've managed to finagle a FC4 system into running everything with SELinux enabled with a half dozen or so changes, and I'm working on getting those changes abstracted into something generically useful (and still giving some benefits of the enhanced security of SELinux) but it's still a little way off. At this point, I still recommend running in permissive or disabled mode.

--

Check out the forum guidelines!

Fri, 03/16/2007 - 19:28
hescominsoon

I have been watching the audit logs for what violations are occurring and once i figure out what it means i hope i can write some policies to help(as long as they aren't a security risk.