I reinstalled (better hardware) a server and had selinux enabled (was
disabled before), and I starting to see why so many people don't use
selinux.
My question is, how many people are using selinux?
I, for instance, am about to disable it.
--
Martín Marqués
select 'martin.marques' || '@' || 'gm
On Tue, 20 Sep 2011 08:14:18 -0300
Martín Marqués wrote:
> I reinstalled (better hardware) a server and had selinux enabled (was
> disabled before), and I starting to see why so many people don't use
> selinux.
>
> My question is, how many people are using selinux?
Yes without problems. Pretty
Around 12:14pm on Tuesday, September 20, 2011 (UK time), Martín Marqués
scrawled:
> My question is, how many people are using selinux?
Not sure how scientific this is, but I use it. Although my servers run
CentOS (with SELinux). I would have thought it would be better to learn
how to solve probl
>Messaggio originale
>Da: martin.marq...@gmail.com
>Data: 20-set-2011
13.14
>A: "Community assistance, encouragement,
> and advice for using Fedora."
>Ogg: selinux is a pain
>
>I reinstalled (better
hardware) a server and had selinux enabled (was
>disabled before), and I
startin
On Tue, 2011-09-20 at 08:14 -0300, Martín Marqués wrote:
> I reinstalled (better hardware) a server and had selinux enabled (was
> disabled before), and I starting to see why so many people don't use
> selinux.
>
> My question is, how many people are using selinux?
>
> I, for instance, am about t
"Martín Marqués" wrote:
>I reinstalled (better hardware) a server and had selinux enabled (was
>disabled before), and I starting to see why so many people don't use
>selinux.
>
>My question is, how many people are using selinux?
>
>I, for instance, am about to disable it.
As with others, I've be
On Tue, 20 Sep 2011 19:37:04 +0800
Ed Greshko wrote:
> Other than the occasional need for a custom policy I've not had any problems.
And did you perform an intensive security review of the source for the
program requiring the custom policy to insure that it is in fact
perfectly OK to allow whatev
Sitat MartÃn Marqués :
> I reinstalled (better hardware) a server and had selinux enabled (was
> disabled before), and I starting to see why so many people don't use
> selinux.
>
> My question is, how many people are using selinux?
>
> I, for instance, am about to disable it.
It depends a bit
2011/9/20 Alan Cox :
> On Tue, 20 Sep 2011 08:14:18 -0300
> Martín Marqués wrote:
>
>> I reinstalled (better hardware) a server and had selinux enabled (was
>> disabled before), and I starting to see why so many people don't use
>> selinux.
>>
>> My question is, how many people are using selinux?
Antonio, I also have selinux on my laptop, and there I have no
problem. The problem is with the server.
The problem arraises when I have services that have to access stuff,
or execute things (like apache with mod_python).
2011/9/20 antonio.montagn...@alice.it :
>
>
>>Messaggio originale
>
2011/9/20 Ed Greshko :
> "Martín Marqués" wrote:
>
>>I reinstalled (better hardware) a server and had selinux enabled (was
>>disabled before), and I starting to see why so many people don't use
>>selinux.
>>
>>My question is, how many people are using selinux?
>>
>>I, for instance, am about to dis
Paul,
I took this off-list, since I think we've gone beyond the general interests
of the group.
On Mon, Sep 19, 2011 at 11:50:43PM -0700, Paul Allen Newell wrote:
> Given that I got four emails from you which all distill down to "try it,
> it is easy" and you already provided "a piece of cake" f
On Tue, Sep 20, 2011 at 07:49:42AM -0500, Dave Ihnat wrote:
> Paul,
>
> I took this off-list, since I think we've gone beyond the general interests
> of the group.
Heh. Guess I *didn't* take it off-list...missed that mutt stuffed the CC:
field even though I told it to respond to Paul. Foo.
Che
On 09/20/2011 08:07 PM, Tom Horsley wrote:
> On Tue, 20 Sep 2011 19:37:04 +0800
> Ed Greshko wrote:
>
>> Other than the occasional need for a custom policy I've not had any problems.
> And did you perform an intensive security review of the source for the
> program requiring the custom policy to in
On Tue, Sep 20, 2011 at 09:25:15 -0300,
Martín Marqués wrote:
>
> Lots of reports with various servers:
>
> - postfix doesn't have access to bounce directory
> - trac can't append to log files
> - abrt complains (can't remember for what).
These should be reported as bugs.
--
users mailing li
On Tue, Sep 20, 2011 at 09:31:14 -0300,
Martín Marqués wrote:
>
> For example, I moved the trac repos to /var/lib/trac, and so apache
> needs extra append and access policy on some of those directories. How
> would I add those policies?
If you move stuff around that affects the default labelli
On 09/19/2011 05:05 PM, Christoph A. wrote:
>
> You didn't read my mail till the end, did you?
haha got me. ohhh please I need to stop reading everything in hurry
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/ma
On 09/20/2011 07:45 AM, Chris Ober wrote:
Rich,
I've read that, and I believe I've followed the steps shown there, but
it doesn't solve my problem.
let's start with perms/ownership
ls -al /etc/dirsrv/slapd-instance
grep nsslapd-localuser /etc/dirsrv/slapd-instance/dse.ldif
see what the server
On 09/20/2011 02:48 AM, Svein Otto Solem wrote:
When setting "passwordMustChange" to on and resetting a users password
as an administrator, the users passwordExpirationTime will be set to
1970010100Z. The user will then be prompted for a new password at
first login. It seems that 19700101
2011/9/20 Bruno Wolff III :
> On Tue, Sep 20, 2011 at 09:31:14 -0300,
> Martín Marqués wrote:
>>
>> For example, I moved the trac repos to /var/lib/trac, and so apache
>> needs extra append and access policy on some of those directories. How
>> would I add those policies?
>
> If you move stuff ar
On 09/19/2011 03:01 PM, Vasil Mikhalenya wrote:
> Hi all,
>
> memberOf plugin changes case of it attrs.
> I have to specify about 4 variants in Cisco ASA ldap map to get auth work,
> like
> memberOf: CN=VPN-users,ou=People,dc=mydoamin
> memberOf: cn=VPN-users,ou=People,dc=mydoamin
> memberOf: cn=v
Am Montag, den 19.09.2011, 22:45 -0700 schrieb Craig White:
>
> If you feel that adding a layer of shell script parsing and then
> manipulating a managed switch somehow secures a network schema that is
> insecure at its foundation is a reasonable implementation then we
> obviously disagree on
> On 19 September 2011 11:02, Vinny Onelli wrote:
> > hello,
> > I downloaded Firefox 4 but I couldn't fine instructions to how to
> > install it. I extract the files then double click on file Firefox to
> > run, but it didn't not installed, the icon disappeared left a gray
> > square in place. I
It's been a while since I've done anything with diskless clients.
I've read and followed the steps Chapter 18 of the "Storage Admin Guide". My
cluster (server + 2 nodes) is working, but I have some questions:
1) The docs make it look like all the clients share the same filesystem and
mount it r
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 09/20/2011 08:27 AM, Martín Marqués wrote:
> Antonio, I also have selinux on my laptop, and there I have no
> problem. The problem is with the server.
>
> The problem arraises when I have services that have to access
> stuff, or execute things (li
On Tue, 2011-09-20 at 08:14 -0300, Martín Marqués wrote:
> I reinstalled (better hardware) a server and had selinux enabled (was
> disabled before), and I starting to see why so many people don't use
> selinux.
Let's clarify what you've written... You are, now, trying to run a
system with SELinux
On Tue, Sep 20, 2011 at 09:12:37 -0500,
Richard Shaw wrote:
>
> Beware of one problem with the sealert/audit2allow instructions. At
> least in my experience, it goes through the whole log and creates a
> policy to allow all denied actions, not necessarily just the one you
> care about. Also, th
On Tuesday, September 20, 2011 10:30:38 AM Tim wrote:
> On Tue, 2011-09-20 at 08:14 -0300, Martín Marqués wrote:
> > I reinstalled (better hardware) a server and had selinux enabled (was
> > disabled before), and I starting to see why so many people don't use
> > selinux.
>
> Let's clarify what yo
Tom Horsley gmail.com> writes:
> ...
> So basically, you can get a system which is every bit as secure
> as one running selinux by turning off selinux, and then you don't
> ever get bothered by the "occasional need" to write a custom
> policy, or get fooled into a sense of security because you
>
Am Dienstag, den 20.09.2011, 08:14 -0300 schrieb Martín Marqués:
> My question is, how many people are using selinux?
60,8% [1]
Regards,
Christoph
[1] http://smolts.org/static/stats/stats.html
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
h
Am Dienstag, den 20.09.2011, 20:13 +0200 schrieb Christoph Wickert:
> Am Dienstag, den 20.09.2011, 08:14 -0300 schrieb Martín Marqués:
>
> > My question is, how many people are using selinux?
>
> 60,8% [1]
Sorry, the actual percentage of people who 'use' it is 79.8% and 68.6%
have it in enforcin
On 09/20/2011 02:13 PM, Christoph Wickert wrote:
> Am Dienstag, den 20.09.2011, 08:14 -0300 schrieb Martín Marqués:
>
>> My question is, how many people are using selinux?
>
> 60,8% [1]
>
> Regards,
> Christoph
>
> [1] http://smolts.org/static/stats/stats.html
>
I see 68.6 % in enforcing mo
Martín Marqués wrote:
> My question is, how many people are using selinux?
>
> I, for instance, am about to disable it.
I use it without interruption. I have not disabled it since Fedora Core 2 or 3,
perhaps earlier. Since then, it has worked infallibly and without cause for
gripe.
--
users
> If so, no wonder you're having grief. While SELinux was off, your
> system was writing files without setting any SELinux contexts. So,
If SELinux was set to permissive then it was writing data but allowing
actions, if not then when you switched it on it would have done an
automatic relabel on
On 09/20/2011 04:14 AM, Martín Marqués wrote:
> My question is, how many people are using selinux?
>
> I, for instance, am about to disable it.
I use it on both of my computers. Why are you going to disable it? Do
you like being insecure?
--
users mailing list
users@lists.fedoraproject.org
To
On 09/19/2011 10:44 PM, Richard Shaw wrote:
> On Mon, Sep 19, 2011 at 3:21 PM, JB wrote:
>> linux guy gmail.com> writes:
>>
>>>
>>> I found a work around. Instead of entering port 22 as a "Trusted Port",
>>> enter
>> it manually as an "Other Port".What is it with Linux (ie Fedora, Ubuntu, etc)
2011/9/20 Alan Cox :
>> If so, no wonder you're having grief. While SELinux was off, your
>> system was writing files without setting any SELinux contexts. So,
>
> If SELinux was set to permissive then it was writing data but allowing
> actions, if not then when you switched it on it would have d
2011/9/20 Joe Zeff :
> On 09/20/2011 04:14 AM, Martín Marqués wrote:
>> My question is, how many people are using selinux?
>>
>> I, for instance, am about to disable it.
>
> I use it on both of my computers. Why are you going to disable it? Do
> you like being insecure?
I spoke with someone who
On 20/09/2011 3:57 PM, Martín Marqués wrote:
> 2
> I spoke with someone who works in HP (system administration) that told
> me they have SELinux disabled on the servers, as the overhead in
> administration is to high.
>
> I'd like to believe my problem is due to lack of selinux configuration
> know
On 09/20/2011 12:57 PM, Martín Marqués wrote:
> I'd like to believe my problem is due to lack of selinux configuration
> knowledge, and not that it's useless.
Are you getting SELinux alerts? If so, it may be an issue; if not, it's
a waste of time playing with it. The reason I asked is because I
> It`s that in the *real world*, getting the immensely-complicated policy
> machinery correct is next-to-impossible. And by correct, I mean
>``provides security, and never causes unwanted failures of
> applications``.
For the web servers I'm running it was a simple matter of reading the
man
2011/9/20 Joe Zeff :
> On 09/20/2011 12:57 PM, Martín Marqués wrote:
>> I'd like to believe my problem is due to lack of selinux configuration
>> knowledge, and not that it's useless.
>
> Are you getting SELinux alerts? If so, it may be an issue; if not, it's
> a waste of time playing with it. Th
On 09/20/2011 16:17, Martín Marqués wrote:
> 2011/9/20 Joe Zeff :
>> On 09/20/2011 12:57 PM, Martín Marqués wrote:
>>> I'd like to believe my problem is due to lack of selinux
>>> configuration
>>> knowledge, and not that it's useless.
>>
>> Are you getting SELinux alerts? If so, it may be an iss
On Tue, Sep 20, 2011 at 8:07 AM, Miner, Jonathan W (US SSA)
wrote:
> It's been a while since I've done anything with diskless clients.
>
> I've read and followed the steps Chapter 18 of the "Storage Admin Guide". My
> cluster (server + 2 nodes) is working, but I have some questions:
>
> 1) The do
I'm glad to hear it wasn't just my computer.
I trust that you'll enter a bug report for this, Thomas ? You seem to have
more detail on it than I do.
There also seems to be an issue with the Options-> Configure Service
Settings as well. If I check Save on Stop and/or Save on Restart and press
OK
I'm having a lot of trouble setting up a Samba share on a virgin F15
install.
Right now everything works until I click on a shared file (via Samba). At
that point I get a "the file or folder smb://nas/TEST does not exist" error.
This is what smbclient shows for 192.168.1.10, ie nas, my Samba ser
Would be sweet if the user had optional controls over which files
screensaver picks from.. and options to set the time period of pix in
the screensaver slide-show...
Would be a plus if the screensaver doubled as a screen on screen
slide-show...
Would be even pluser if the user could touch a set
On Wed, Sep 21, 2011 at 12:55 AM, Linda McLeod wrote:
>
> Would be sweet if the user had optional controls over which files
> screensaver picks from.. and options to set the time period of pix in
> the screensaver slide-show...
>
> Would be a plus if the screensaver doubled as a screen on screen
>
On Tue, Sep 20, 2011 at 6:53 PM, linux guy wrote:
>
> I'm finding the online documentation for Samba to be umm... wanting. I'll
> post up a little HOWTO when I get my NAS going.
>
Samba how-to's always have a short shelf-life, because Microsoft wants
to make it as hard as possible.
In getting
We are working on consolidating our diverse LDAP systems onto 389DS, but
we are having some trouble with openLDAP. The designers of a particular
software package are using a custom openLDAP schema and we aren't sure
how to get it into 389. When we simply copy the .ldif file into the
/schema folder
2011/9/20 David Quigley :
> On 09/20/2011 16:17, Martín Marqués wrote:
>>
>> Yes, I get selinux alerts. I stated them in an earlier mail.
>>
>> From the alerts, the only one that gave me trouble was mod_python,
>> and
>> basically trac.
>>
>> Also, apache couldn't conect to the PostgreSQL server, b
Surely its not that hard to get Samba going.
If it wasn't worth the effort, how else did you enable file sharing on a
mixed client network ?
Has anyone gotten Samba working from a virgin F15 install ?
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription optio
On Tue, 20 Sep 2011 18:17:23 -0600
linux guy wrote:
> Has anyone gotten Samba working from a virgin F15 install ?
Not exactly. I used to use the web interface to try and
set up samba on each install of a new fedora, but at some
point, I could no longer duplicate my working setup by
starting from
On Tue, Sep 20, 2011 at 8:17 PM, linux guy wrote:
> Surely its not that hard to get Samba going.
>
> If it wasn't worth the effort, how else did you enable file sharing on a
> mixed client network ?
>
> Has anyone gotten Samba working from a virgin F15 install ?
>
If you want it to work out of th
On 09/20/2011 03:10 PM, Alan Cox wrote:
> In some perhaps. The big cases it helps are desktop (mostly protecting
> against browser stuff) - where it usually just works, and web serving,
> where it's most definitely valuable but does mean reading the docs.
I always find it interesting when people s
On 09/20/2011 04:14 AM, Martín Marqués wrote:
> I reinstalled (better hardware) a server and had selinux enabled (was
> disabled before), and I starting to see why so many people don't use
> selinux.
>
> My question is, how many people are using selinux?
>
> I, for instance, am about to disable it.
On Tue, 2011-09-20 at 20:29 -0400, Robert Myers wrote:
> On Tue, Sep 20, 2011 at 8:17 PM, linux guy wrote:
> > Surely its not that hard to get Samba going.
> >
> > If it wasn't worth the effort, how else did you enable file sharing on a
> > mixed client network ?
> >
> > Has anyone gotten Samba wo
On Tue, 2011-09-20 at 16:53 -0600, linux guy wrote:
> I'm having a lot of trouble setting up a Samba share on a virgin F15
> install.
>
> Right now everything works until I click on a shared file (via Samba).
> At that point I get a "the file or folder smb://nas/TEST does not
> exist" error.
>
>
On Tue, 2011-09-20 at 19:25 -0400, Robert Myers wrote:
> On Tue, Sep 20, 2011 at 6:53 PM, linux guy wrote:
>
> >
> > I'm finding the online documentation for Samba to be umm... wanting. I'll
> > post up a little HOWTO when I get my NAS going.
> >
>
> Samba how-to's always have a short shelf-lif
On Tue, Sep 20, 2011 at 6:27 PM, Tom Horsley wrote:
> On Tue, 20 Sep 2011 18:17:23 -0600
> linux guy wrote:
>
> > Has anyone gotten Samba working from a virgin F15 install ?
>
> Not exactly.
Thank you very much for sharing that, Tom.
I find the following two lines very interesting.
dns pro
On Tue, Sep 20, 2011 at 9:29 PM, Craig White wrote:
>
> For your problems...
>
> chkconfig smb on
> chkconfig nmb on
> service nmb restart
> service smb restart
>
> Do you mean
systemctl enable smb.service
systemctl enable nmb.service
systemctl start nmb.service
systemctl start smb.service
Beca
On Tue, Sep 20, 2011 at 11:15 PM, Craig White wrote:
> On Tue, 2011-09-20 at 20:29 -0400, Robert Myers wrote:
>> On Tue, Sep 20, 2011 at 8:17 PM, linux guy wrote:
>> > Surely its not that hard to get Samba going.
>> >
>> > If it wasn't worth the effort, how else did you enable file sharing on a
>
On Tue, Sep 20, 2011 at 11:36 PM, Craig White wrote:
> On Tue, 2011-09-20 at 19:25 -0400, Robert Myers wrote:
>> On Tue, Sep 20, 2011 at 6:53 PM, linux guy wrote:
>>
>> >
>> > I'm finding the online documentation for Samba to be umm... wanting. I'll
>> > post up a little HOWTO when I get my NAS
On Tue, 2011-09-20 at 22:11 -0600, linux guy wrote:
>
>
> On Tue, Sep 20, 2011 at 9:29 PM, Craig White
> wrote:
>
>
>
> For your problems...
>
> chkconfig smb on
> chkconfig nmb on
> service nmb restart
> service smb res
On Wed, 2011-09-21 at 00:15 -0400, Robert Myers wrote:
> On Tue, Sep 20, 2011 at 11:15 PM, Craig White wrote:
> > On Tue, 2011-09-20 at 20:29 -0400, Robert Myers wrote:
> >> On Tue, Sep 20, 2011 at 8:17 PM, linux guy wrote:
> >> > Surely its not that hard to get Samba going.
> >> >
> >> > If it w
On Wed, 2011-09-21 at 00:25 -0400, Robert Myers wrote:
> On Tue, Sep 20, 2011 at 11:36 PM, Craig White wrote:
> > On Tue, 2011-09-20 at 19:25 -0400, Robert Myers wrote:
> >> On Tue, Sep 20, 2011 at 6:53 PM, linux guy wrote:
> >>
> >> >
> >> > I'm finding the online documentation for Samba to be u
On 20 September 2011 10:58, Vinny Onelli wrote:
<--SNIP-->
> Thank you Hiisi, for the prompt response. I executed the instruction you
> give me, the fallows is the result
>
> [Vinny@Lab2 ~]$ su -c "yum --enablerepo=remi update firefox"
> Password:
> Loaded plugins: langpacks, presto, refresh-packa
On Sun, Sep 11, 2011 at 4:04 AM, Stefan Held wrote:
> Am Samstag, den 10.09.2011, 10:43 +0530 schrieb Manish Kathuria:
>
>> How can it be rectified ?
>
> I have had many problems with the version of Evolution which is bundeld
> within Fedora/Updates.
>
> Currently i am using the version in updates
68 matches
Mail list logo
