Re: SElinux settings different for upgrade vs full-install

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Douglas Otis wrote:
When logging in as root on an upgraded system,  the desktop would not load
(gconf related errors), and there appeared to be no way to shutdown or
escape beyond hitting the system reset while seeing mostly a blank screen.

There was a difference noticed between a full-install and the upgrade from
Fedora 8.  User Mapping for "root" had been "root", whereas the full-install
had this set to "unconfined_u" (which is also the default).  Making this
change seems to have fixed the problem noticed when starting a graphical
logon as root.


Logging in graphically as root is discouraged. I am not sure if there is a question here. Upgrades are often screwy. I don't generally do upgrades so I can't help you much here.

After making this change, the system Default Policy Type also changed to
"targeted".  Being new to SElinux, it is hard to know the risk this may

Default policy is targeted, this is normal.

represent, if any.  Does anyone know?  Should the policy exceptions be used
to modify SElinux instead?

I am not sure what you mean by this question. The policy defines what is allowed. If its not allowed in policy then its denied.

This should help answer some of your questions. Flip back to the first entry. Be patient and read all of it. I need to reread it all myself.

http://danwalsh.livejournal.com/

This is just one source of information. If you want more let me know.

So much information so little time.

-Max

--
Fortune favors the BOLD

--
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux