i try both ways (fixfiles / touch /.autorelabel n reboot), but rpmverify still state ........C. SELinux is actived, i post the conffile ---/etc/sysconfig/selinux--- # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of enforcing. # disabled - SELinux is fully disabled. SELINUX=permissive # SELINUXTYPE= type of policy in use. Possible values are: # targeted - Only targeted network daemons are protected. # strict - Full SELinux protection. SELINUXTYPE=targeted ---------------------------- maybe is dued by the SELINUXTYPE=targeted ? > On Tue, 10 Jul 2007 22:49:36 +0200 (CEST) > "Emanuele Maiarelli" <emanuele@xxxxxxxxxxxxx> wrote: > >> after running 'fixfiles relabel' rpmverify still report the flag, >> have it to reboot? > > It's typically better to use the 'touch /.autorelabel' and reboot than > to use fixfiles. I suppose you could also try the 'fixfiles -Ra > restore' command. That should restore selinux contexts from the rpm > database. > > Do you have selinux enabled? If you are disabling it > (see /etc/sysconfig/selinux) then it's not going to be able to relabel > the files since it's turned off. > > kevin > > -- Emanuele Maiarelli Nettirrena s.r.l. LUCCA IT http://www.nettirrena.it emanuele@xxxxxxxxxxxxx tel. +39 0583 312257 fax. +39 0583 316373 -- Fedora-security-list mailing list Fedora-security-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-security-list
