Re: Enabling SELinux (was Re: How to make SELinux in Fedora work?)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Yes.  I had a few 'hang ups' when running fixfiles in multi-user mode.

Also, some processes may be left running if you go to single-user via 'telinit 1'.

tom

Stephen Smalley wrote:

On Thu, 2004-06-03 at 09:37, park lee wrote:


ON Thu, 27 May 2004 11:07:33 ,Tom London wrote:



Following the attached advice, here's what I did:
1. Modified /etc/sysconfig/selinux to have 'SELINUX=permissive'
2. Rebooted single-user and ran 'fixfiles relabel'
3. Rebooted multi-user


For the 2nd item, I want to ask why you must reboot in single-user?
can't we run 'fixfiles relabel' directly?



It is generally safer to run it in single-user mode, both to ensure that you don't have any stray processes still running in the wrong domain (and thus creating files in the wrong types after the relabel) and to avoid problems with the purging of /tmp performed by relabel (as that will kill files on which windowing applications depend). fixfiles restore avoids the purging of /tmp.





[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux