I hate SELinux

This is a discussion on I hate SELinux within the Linux Security forums, part of the System Security and Security Related category; Every time I upgrade the selinux-policy-targeted and selinux-policy-targeted-sources files using yum, my cedega/winex3/crossover ...


Go Back   Usenet Forums > System Security and Security Related > Linux Security

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 07-03-2005
Mike
 
Posts: n/a
Default I hate SELinux

Every time I upgrade the selinux-policy-targeted and
selinux-policy-targeted-sources files using yum, my
cedega/winex3/crossover programs stop working. How do I fix this abortion?
I once did it by going to the gui program Security Level
Configuration and un-checking the Enforcing Current Permissive box.
Uninstall seems to be a beautiful idea to me.

Mike
--
Remove SPAMSUCKS to reply

(o<
//\ Registered Linux User #188949
V_/_

http://www.linuxsluts.com
http://toastytech.com/evil/index.html

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvalds


Reply With Quote
  #2 (permalink)  
Old 07-04-2005
Simon Andrews
 
Posts: n/a
Default Re: I hate SELinux

Mike wrote:
> Every time I upgrade the selinux-policy-targeted and
> selinux-policy-targeted-sources files using yum, my
> cedega/winex3/crossover programs stop working. How do I fix this abortion?


It depends what you mean by "fix". If you want to alter your policy to
allow whatever is being blocked then look at the errors in your
/var/log/messages and change the policy to allow those actions. There
is even a tool (audit2allow) which will turn refusals into permit
statements. If you're doing this it's best to run in permissive mode
for a while to catch everything you need to change.


> I once did it by going to the gui program Security Level
> Configuration and un-checking the Enforcing Current Permissive box.
> Uninstall seems to be a beautiful idea to me.


If you want to turn selinux off altogether then exit
/etc/sysconfig/selinux and set it to "disabled". When you next reboot
it's gone.

If you're interested in getting on top of selinux then have a look at
the FAQ page:

http://fedora.redhat.com/docs/selinux-faq-fc3/

or join the selinux mailing list:

http://www.redhat.com/mailman/listin...a-selinux-list

(I'm assuming from the package names you're using that you're using
Redhat / Fedora).

HTH

Simon.
Reply With Quote
  #3 (permalink)  
Old 07-05-2005
Mike
 
Posts: n/a
Default Re: I hate SELinux

Thanks Simon, I will be turning it off. BTW, I'm using FC3 on a AMD64
Cheers!

Mike
--
Remove SPAMSUCKS to reply

(o<
//\ Registered Linux User #188949
V_/_

http://www.linuxsluts.com
http://toastytech.com/evil/index.html

"Microsoft isn't evil, they just make really crappy operating systems." -
Linus Torvalds


Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On




All times are GMT +1. The time now is 03:17 PM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0