RE: 'setsebool -P' works but throws errors; changes not permanent

2018-06-19 Thread Mike Hughes
> -Original Message- > From: Stephen Smalley > Sent: Tuesday, June 19, 2018 07:39 > > On 06/18/2018 04:33 PM, Mike Hughes wrote: > >> -Original Message- > >> From: Stephen Smalley > >> Sent: Monday, June 18, 2018 15:28 > >> On 0

RE: 'setsebool -P' works but throws errors; changes not permanent

2018-06-18 Thread Mike Hughes
> -Original Message- > From: Stephen Smalley > Sent: Monday, June 18, 2018 15:28 > To: Mike Hughes ; selinux@tycho.nsa.gov > Subject: Re: 'setsebool -P' works but throws errors; changes not permanent > > On 06/18/2018 03:44 PM, Mike Hughes wrote: > > We use

'setsebool -P' works but throws errors; changes not permanent

2018-06-18 Thread Mike Hughes
We use Yubikey for two-factor ssh authentication which requires enabling a Boolean called "authlogin_yubikey". It has been working fine until a few weeks ago. Errors appear when attempting to set the policy: -- [Cent-7:root@my_server home]# getsebool authlogin_yubikey authlogin_yubikey --> off