This is a discussion on I hate SELinux within the Linux Security forums, part of the System Security and Security Related category; Every time I upgrade the selinux-policy-targeted and selinux-policy-targeted-sources files using yum, my cedega/winex3/crossover ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Every time I upgrade the selinux-policy-targeted and
selinux-policy-targeted-sources files using yum, my cedega/winex3/crossover programs stop working. How do I fix this abortion? I once did it by going to the gui program Security Level Configuration and un-checking the Enforcing Current Permissive box. Uninstall seems to be a beautiful idea to me. Mike -- Remove SPAMSUCKS to reply (o< //\ Registered Linux User #188949 V_/_ http://www.linuxsluts.com http://toastytech.com/evil/index.html "Microsoft isn't evil, they just make really crappy operating systems." - Linus Torvalds |
|
|||
|
Mike wrote:
> Every time I upgrade the selinux-policy-targeted and > selinux-policy-targeted-sources files using yum, my > cedega/winex3/crossover programs stop working. How do I fix this abortion? It depends what you mean by "fix". If you want to alter your policy to allow whatever is being blocked then look at the errors in your /var/log/messages and change the policy to allow those actions. There is even a tool (audit2allow) which will turn refusals into permit statements. If you're doing this it's best to run in permissive mode for a while to catch everything you need to change. > I once did it by going to the gui program Security Level > Configuration and un-checking the Enforcing Current Permissive box. > Uninstall seems to be a beautiful idea to me. If you want to turn selinux off altogether then exit /etc/sysconfig/selinux and set it to "disabled". When you next reboot it's gone. If you're interested in getting on top of selinux then have a look at the FAQ page: http://fedora.redhat.com/docs/selinux-faq-fc3/ or join the selinux mailing list: http://www.redhat.com/mailman/listin...a-selinux-list (I'm assuming from the package names you're using that you're using Redhat / Fedora). HTH Simon. |
|
|||
|
Thanks Simon, I will be turning it off. BTW, I'm using FC3 on a AMD64
Cheers! Mike -- Remove SPAMSUCKS to reply (o< //\ Registered Linux User #188949 V_/_ http://www.linuxsluts.com http://toastytech.com/evil/index.html "Microsoft isn't evil, they just make really crappy operating systems." - Linus Torvalds |