Re: "Could not change policy booleans"

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Paul Howarth wrote:
Daniel J Walsh wrote:
Stephen Smalley wrote:
On Wed, 2007-06-13 at 14:35 +0100, Paul Howarth wrote:
Stephen Smalley wrote:
On Wed, 2007-06-13 at 10:00 +0100, Paul Howarth wrote:
Daniel J Walsh wrote:
Paul Howarth wrote:
Nils Caspar wrote:
That should have been solved by an update to dbus in fc6 a month ago.
What Fedora
release are you running? Are you completely updated?
I'm running a full updated fedora 7.

That should have worked. That should be the correct syntax. Was there
an avc
associated with trying to set this?
There was no other warning.

I have the same problem in an other fedora 7 VM. Maybe it's a fedora 7
bug... :(
I've just hit the same problem on a fresh Fedora 7 install, with all released updates.

Paul.

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
Does this fix the problem?

restorecon -R -v /etc/selinux/targeted
No; there are no AVC denials in the audit log (at least not relating to this...) so I don't think it's an SELinux permissions issue.

Updating to the latest selinux package updates from updates-testing hasn't helped either.
Bug in setsebool (it is actually succeeding, but falling through to the error path and thus incorrectly saying that it failed, as a result of a
"build fix").  Fixed in policycoreutils 2.0.21.
Ah, saves me having to put something in an initscript :-)

FC7 has policycoreutils-2.0.16-5.fc7 (from updates-testing), which seems a long way behind 2.0.21. Is a fix likely any time soon?

I sent Dan the patch separately as well, in case he wants to just apply
it without updating otherwise.
Fixed in policycoreutils <https://admin.fedoraproject.org/updates/policycoreutils>-2.0.16-6.fc7

Thanks.

On an unrelated issue, where does the version number in the selinux-policy package come from? Upstream seems to do date-based releases rather than version number-based. I ask because I need to update my policy module for mod_fcgid and I'll need different versions for F7 (using patterns) and older releases (using create_file_perms etc.).

Paul.
It comes from me.

selinux-policy-2.3.4

Everytime I release My own modifications I increment the last digit, everytime I merge with upstream I update the middle number, and reset the last digit to 1. Everytime there is a major change to policy example-reference I increment the first. digit. If you do a

rpm -qi selinux-policy
It will show you the revision this policy is based off of.

BTW, I am working on merging strict and targeted policy in Rawhide which will increment the major number. selinux-policy-3.0.1 will be released soon.


--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux