Paul Howarth wrote: > What's the output of: > > # getsebool -a | grep httpd Thanks to you all for your attempts to help me. The response to the above query is ------------------------------- [tim@alfred ~]$ getsebool -a | grep httpd getsebool: SELinux is disabled ------------------------------- I'm not clear why this is, as when I run system-config-securitylevel and click on the SELinux tab there are 3 checkboxes, the first of which is entitled "Enabled (Modification Requires Reboot)". This is ticked (and always has been), which I took to mean that SELinux was enabled. The second checkbox, which is also ticked, is entitled "Enforcing Current Disabled" which I find unintelligible. The third checkbox, which is not ticked, is entitled "Relabel on next reboot", which I also find unintelligible. Returning for a moment to the Firewall Options tab, I'm actually running shorewall, which I am quite happy with, and would prefer not to change. (I'm running the standard "two-interfaces" rules.) If I wanted to run selinux, do I need to enable the firewall given in the system-config-securitylevel tab? Or are the services in the two tabs independent? If so, might I suggest it would be better to have two different system-config-* programs? My position is that I would like to run selinux if it were reasonably clear how to do this; but at the moment clicking OK on leaving system-config-securitylevel has the effect of cutting off my laptop access to the internet. I don't really feel in any great security danger, so selinux is not top of my list of priorities; if it were possible to run it, after spending say 1 or 2 hours reading the documentation, and if it did not then affect my current usage, I would do it. Of course my situation is not important on a global scale; but I imagine there must be many Fedora users whose attitude to selinux is much the same as mine. I would not have thought it would take very long, after making what appear to be major changes to SELinux, to modify the documentation to take account of the changes. -- Timothy Murphy e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list