Re: selinux not enabled

From: Sjoerd Mullender (sjoerd_at_acm.org)
Date: 04/11/05

  • Next message: Mark Sargent: "Re: Sendmail- Is this correct.?" 
    Date: Mon, 11 Apr 2005 10:06:03 +0200
To: For users of Fedora Core releases <fedora-list@redhat.com>

    Richard E Miles wrote:
    > On Sun, 10 Apr 2005 11:23:04 +0200
    > Sjoerd Mullender <sjoerd@acm.org> wrote:
    >
    >
    >>Rahul Sundaram wrote:
    >>
    >>>In FC3 you will have specify either targeted or strict. Permissive is
    >>>logging the access violations but not actually limiting it. Its for
    >>>debugging purposes.
    >>>
    >>>regards
    >>>Rahul
    >>>
    >>
    >>Getting back to my original question. I have set SELINUX=permissive and
    >>SELINUXTYPE=targeted in the config file, I have rebooted the system, and
    >>SELinux is still not enabled.
    >>
    >>What other files are relevant? Where can I look to figure out why
    >>SELinux is not getting enabled?
    >>
    >>I am running a fully up-to-date FC3.
    >>
    >>--
    >>Sjoerd Mullender <sjoerd@acm.org>
    >>
    >
    > How do you know that SELinux is not working? Did you do a:
    > dmesg|less and check for SELinux entries?

    To paraphrase the original post, after settings things up, and after a
    reboot:
    # sestatus -v
    SELinux status: disabled
    # dmesg | grep -i selinux
    Kernel command line: ro root=LABEL=/ apm=off acpi=on selinux=1
    SELinux: Initializing.
    SELinux: Starting in permissive mode
    selinux_register_security: Registering secondary module capability
    SELinux: Registering netfilter hooks

    On another machine where I also tried this, I saw a lot more output for
    the latter command. 

    


    


    


    -- 
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: http://www.redhat.com/mailman/listinfo/fedora-list
  • Next message: Mark Sargent: "Re: Sendmail- Is this correct.?"

    Relevant Pages

    • re: SELinux and FC2
      ... -|- |William Hooper Thanks for the reference William. ... SELinux issue that the code is included but disabled after ... Richard Miles ...
      (Fedora)
    • Re: Experience with SELinux enabled and targetted policy
      ... "William Hooper" wrote: ... > Richard E Miles said: ... >> In order to understand SELinux more I enabled SELinux on my system. ...
      (Fedora)
    • Re: selinux not enabled
      ... Richard E Miles wrote: ... >>This output shows that selinux is enabled at the kernel level. ...
      (Fedora)
    • Re: selinux not enabled
      ... :SELinux: Initializing. ... :selinux_register_security: Registering secondary module capability ... :SELinux: Registering netfilter hooks ...
      (Fedora)
    • selinux not enabled
      ... and when the system was rebooting, there was no noticeable delay while ... In /var/log/messages and in the dmesg output, ... SELinux being disabled. ... selinux_register_security: Registering secondary module capability ...
      (Fedora)