Re: How to get rid of selinux
On Tue, 09 Dec 2008 13:15:17 -0600 Mike McCarty <[EMAIL PROTECTED]> wrote: > > SELINUX is extremely invasive, and Fedora has chosen not > to support an install which does not include it. This > makes sense, because it would increase the QA effort > required. > You cannot uninstall SELinux. However, disabling it has the same effect except for consuming a bit of disk space. Once disabled, it is as if it was never installed in the first place. -- "Neither Lifestyle nor Agenda" http://www.tips-Q.com -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
gab_v wrote:
Dear all,
I have a Fedora 9 distr.
I've lot of problem with SELinux, so I want to know how to get rid of
it. In particular I am interested NOT in make SELinux status
"Disabled" but to uninstall it.
SELINUX invades applications. In particular, it is part of applications
like mv, cp, ls, ln, etc. (By application, I don't mean OpenOffice,
I mean things that run in user space rather than in kernel space, or as
a daemon.) The Fedora website at one time documented 40 (IIRC)
applications which required modification to run with SELINUX.
SELINUX is extremely invasive, and Fedora has chosen not to support
an install which does not include it. This makes sense, because it
would increase the QA effort required.
I am not sure how to do it, also because I just started working with Linux OS.
It can't be done, at present. I suggest you try a distro which does
not have SELINUX in it. Unfortunately for you (and for me) it seems
that all distros are either there or have plans for that. Those
who don't want SELINUX are going to have an increasingly difficult
time. I would suggest going the route I'm taking, which is Linux
From Scratch, but you say you are a beginner, and LFS is defintely
not something I would recommend for a beginner.
It's not clear to me why disabling it didn't cure your problem,
however.
Mike
--
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
Joachim Backes wrote: Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 gab_v wrote: Dear all, I have a Fedora 9 distr. I've lot of problem with SELinux, so I want to know how to get rid of it. In particular I am interested NOT in make SELinux status "Disabled" but to uninstall it. I am not sure how to do it, also because I just started working with Linux OS. How can I do? I was thinking about doing rpm -qa |grep SELinux and then rpm -e ... But will it be enough? I want to do very safe commands since I need the computer at work. Thanks in advance p.s. I said not how to disabled SELinux because I did it once and I did not solve the problem and, after that, I had a block at boot process. libselinux is a core library of the Fedora System and some other Linux Distributes, it can not be removed. Policycoreutils includes restorecon command which has been required by several other packages, so it can not be removed either. You should be able to remove other selinux packages. yum remove selinux-poliycy This is a very bad idea, and it uninstalls policycoreutils-gui too: I tried it, but afterwards, system-config-services did no more run as non-root-user, but failed with an flood of error messages. And the gnome menu System->Administration->Services no more runs as non-root-user. These problems still appear even after reinstalling selinux-policy (and policycoreutils-gui): system-config-services ERROR:dbus.proxies:Introspect error on :1.51:/org/fedoraproject/Config/Services/ServiceHerders/SysVServiceHerder: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.freedesktop.DBus.Introspectable" member "Introspect" error name "(unset)" destination ":1.51") Traceback (most recent call last): File "/usr/bin/system-config-services", line 945, in GUI (use_dbus = use_dbus).run () File "/usr/bin/system-config-services", line 900, in __init__ self.serviceherders.append (cls (bus = self._bus)) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 53, in __init__ for service_name in self.list_services (): File "/usr/lib/python2.5/site-packages/slip/dbus/polkit.py", line 48, in enable_proxy_wrapper return func (*p, **k) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 66, in list_services return self.dbus_object.list_services (dbus_interface = "org.fedoraproject.Config.Services.ServiceHerder") File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 68, in __call__ return self._proxy_method(*args, **keywords) File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 140, in __call__ **keywords) File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 630, in call_blocking message, timeout) dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.fedoraproject.Config.Services.ServiceHerder" member "list_services" error name "(unset)" destination ":1.51") Joachim Backes <[EMAIL PROTECTED]> I could solve this described problem by replacing /etc/dbus-1/system.conf by a backupped version of this file. Joachim Backes <[EMAIL PROTECTED]> smime.p7s Description: S/MIME Cryptographic Signature -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
Joachim Backes wrote: Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 gab_v wrote: Dear all, I have a Fedora 9 distr. I've lot of problem with SELinux, so I want to know how to get rid of it. In particular I am interested NOT in make SELinux status "Disabled" but to uninstall it. I am not sure how to do it, also because I just started working with Linux OS. How can I do? I was thinking about doing rpm -qa |grep SELinux and then rpm -e ... But will it be enough? I want to do very safe commands since I need the computer at work. Thanks in advance p.s. I said not how to disabled SELinux because I did it once and I did not solve the problem and, after that, I had a block at boot process. libselinux is a core library of the Fedora System and some other Linux Distributes, it can not be removed. Policycoreutils includes restorecon command which has been required by several other packages, so it can not be removed either. You should be able to remove other selinux packages. yum remove selinux-poliycy This is a very bad idea, and it uninstalls policycoreutils-gui too: I tried it, but afterwards, system-config-services did no more run as non-root-user, but failed with an flood of error messages. And the gnome menu System->Administration->Services no more runs as non-root-user. These problems still appear even after reinstalling selinux-policy (and policycoreutils-gui): system-config-services ERROR:dbus.proxies:Introspect error on :1.51:/org/fedoraproject/Config/Services/ServiceHerders/SysVServiceHerder: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.freedesktop.DBus.Introspectable" member "Introspect" error name "(unset)" destination ":1.51") Traceback (most recent call last): File "/usr/bin/system-config-services", line 945, in GUI (use_dbus = use_dbus).run () File "/usr/bin/system-config-services", line 900, in __init__ self.serviceherders.append (cls (bus = self._bus)) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 53, in __init__ for service_name in self.list_services (): File "/usr/lib/python2.5/site-packages/slip/dbus/polkit.py", line 48, in enable_proxy_wrapper return func (*p, **k) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 66, in list_services return self.dbus_object.list_services (dbus_interface = "org.fedoraproject.Config.Services.ServiceHerder") File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 68, in __call__ return self._proxy_method(*args, **keywords) File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 140, in __call__ **keywords) File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 630, in call_blocking message, timeout) dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.fedoraproject.Config.Services.ServiceHerder" member "list_services" error name "(unset)" destination ":1.51") Joachim Backes <[EMAIL PROTECTED]> Hi, I could solvis the problem by replacing /etc/dbus-1/system.conf by a backupped version I made before removing selinux-policy. Joachim Backes <[EMAIL PROTECTED]> smime.p7s Description: S/MIME Cryptographic Signature -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
Daniel J Walsh wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 gab_v wrote: Dear all, I have a Fedora 9 distr. I've lot of problem with SELinux, so I want to know how to get rid of it. In particular I am interested NOT in make SELinux status "Disabled" but to uninstall it. I am not sure how to do it, also because I just started working with Linux OS. How can I do? I was thinking about doing rpm -qa |grep SELinux and then rpm -e ... But will it be enough? I want to do very safe commands since I need the computer at work. Thanks in advance p.s. I said not how to disabled SELinux because I did it once and I did not solve the problem and, after that, I had a block at boot process. libselinux is a core library of the Fedora System and some other Linux Distributes, it can not be removed. Policycoreutils includes restorecon command which has been required by several other packages, so it can not be removed either. You should be able to remove other selinux packages. yum remove selinux-poliycy This is a very bad idea, and it uninstalls policycoreutils-gui too: I tried it, but afterwards, system-config-services did no more run as non-root-user, but failed with an flood of error messages. And the gnome menu System->Administration->Services no more runs as non-root-user. These problems still appear even after reinstalling selinux-policy (and policycoreutils-gui): system-config-services ERROR:dbus.proxies:Introspect error on :1.51:/org/fedoraproject/Config/Services/ServiceHerders/SysVServiceHerder: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.freedesktop.DBus.Introspectable" member "Introspect" error name "(unset)" destination ":1.51") Traceback (most recent call last): File "/usr/bin/system-config-services", line 945, in GUI (use_dbus = use_dbus).run () File "/usr/bin/system-config-services", line 900, in __init__ self.serviceherders.append (cls (bus = self._bus)) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 53, in __init__ for service_name in self.list_services (): File "/usr/lib/python2.5/site-packages/slip/dbus/polkit.py", line 48, in enable_proxy_wrapper return func (*p, **k) File "/usr/lib/python2.5/site-packages/scservices/dbus/proxy/serviceherders.py", line 66, in list_services return self.dbus_object.list_services (dbus_interface = "org.fedoraproject.Config.Services.ServiceHerder") File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 68, in __call__ return self._proxy_method(*args, **keywords) File "/usr/lib/python2.5/site-packages/dbus/proxies.py", line 140, in __call__ **keywords) File "/usr/lib/python2.5/site-packages/dbus/connection.py", line 630, in call_blocking message, timeout) dbus.exceptions.DBusException: org.freedesktop.DBus.Error.AccessDenied: A security policy in place prevents this sender from sending this message to this recipient, see message bus configuration file (rejected message had interface "org.fedoraproject.Config.Services.ServiceHerder" member "list_services" error name "(unset)" destination ":1.51") Joachim Backes <[EMAIL PROTECTED]> smime.p7s Description: S/MIME Cryptographic Signature -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 gab_v wrote: > Dear all, > I have a Fedora 9 distr. > > I've lot of problem with SELinux, so I want to know how to get rid of it. In > particular I am interested NOT in make SELinux status "Disabled" but to > uninstall it. > > I am not sure how to do it, also because I just started working with Linux OS. > > How can I do? > > I was thinking about > doing > rpm -qa |grep SELinux > and then > rpm -e ... > > But will it be enough? > > I want to do very safe commands since I need the computer at work. > > Thanks in advance > > p.s. > I said not how to disabled SELinux because I did it once and I did not solve > the problem and, after that, I had a block at boot process. > > libselinux is a core library of the Fedora System and some other Linux Distributes, it can not be removed. Policycoreutils includes restorecon command which has been required by several other packages, so it can not be removed either. You should be able to remove other selinux packages. yum remove selinux-poliycy Should remove the policy package which is the largest package. We have not heard of SELinux disabled problems in years so saying it caused you problems a while ago, probably was a very old version of Fedora or was not an SELinux problem in the first place, or you really did not have SELinux disabled. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkk+dxkACgkQrlYvE4MpobNOwwCg1hwqQMIWq+dHgdO8PrAdfmyo 0rEAni24yPzYlms2d1FYJdbwxw9UziVj =niOr -END PGP SIGNATURE- -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
On Tuesday 09 December 2008 01:06:22 am gab_v wrote: > Dear all, > I have a Fedora 9 distr. > > I've lot of problem with SELinux, so I want to know how to get rid of > it. In particular I am interested NOT in make SELinux status > "Disabled" but to uninstall it. > > I am not sure how to do it, also because I just started working with > Linux OS. > > How can I do? The easy option: add "selinux=0' to the kernel command line in /boot/grub/grub.conf. The hard option: rebuild the kernel without SELinux support. Either way, set SELinux to Disabled in /etc/selinux/config. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
gab_v wrote: p.s. I said not how to disabled SELinux because I did it once and I did not solve the problem and, after that, I had a block at boot process. You probably ran "setenforce 0" or added a kernel arg in grub (but not grub.conf). Those don't permanently disable SELinux. To do that, you should modify /etc/selinux/config and set "SELINUX=disabled" -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
On Tue, 09 Dec 2008 07:06:22 +0100 gab_v wrote: > I've lot of problem with SELinux, so I want to know how to get rid of it. In > particular I am interested NOT in make SELinux status "Disabled" but to > uninstall it. > > I am not sure how to do it, also because I just started working with Linux OS. In short, you can't. You can disable it, but it's a dependency of much of the core software that makes up Fedora. If you attempt to remove it you will find that it takes just about everything else with it. The most practical option is to simply disable it. The second most-practical option is to use a different Linux distribution that doesn't include and depend on selinux. The third, probably least practical option, would be to create your own distribution from the Fedora source rpms -- modify them to remove all dependencies on selinux, then compile and install them. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com DRY CLEANER BUSINESS FOR SALE ~ http://www.canadadrycleanerforsale.com -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid of selinux
On Tue, Dec 09, 2008 at 07:06:22 +0100, gab_v <[EMAIL PROTECTED]> wrote: > > I've lot of problem with SELinux, so I want to know how to get rid of it. In > particular I am interested NOT in make SELinux status "Disabled" but to > uninstall it. > > I am not sure how to do it, also because I just started working with Linux OS. Then you probably shouldn't try to uninstall it. Just set it to disabled. If you want something else, it would probably just be easier to use another distro that doesn't have it. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
How to get rid of selinux
Dear all, I have a Fedora 9 distr. I've lot of problem with SELinux, so I want to know how to get rid of it. In particular I am interested NOT in make SELinux status "Disabled" but to uninstall it. I am not sure how to do it, also because I just started working with Linux OS. How can I do? I was thinking about doing rpm -qa |grep SELinux and then rpm -e ... But will it be enough? I want to do very safe commands since I need the computer at work. Thanks in advance p.s. I said not how to disabled SELinux because I did it once and I did not solve the problem and, after that, I had a block at boot process. -- This is an email sent via The Fedora Community Portal https://fcp.surfsite.org https://fcp.surfsite.org/modules/newbb/viewtopic.php?post_id=309887&topic_id=65105&forum=10#forumpost309887 If you think, this is spam, please report this to [EMAIL PROTECTED] and/or blame [EMAIL PROTECTED] -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
