Re: Strange /sbin and /usr/sbin permissions



Teo wrote:

Hi,

are you using SELinux? Check /etc/selinux/config. If yes you will have
to check the its configuration which could be preventing you to change
/sbin in your context.

Matteo

I checked the file and it seems to be disabled:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted

system-config-securitylevel also says it is disabled.


I don't know anything about selinux, but I looked in
/etc/selinux/targeted and found a few .LOCK files in there

I did find this:
http://fedora.redhat.com/docs/selinux-faq-fc5/#id2960938

$ ls -dalZ /usr/sbin
drwxr-xr-x root root system_u:object_r:sbin_t:s0
/usr/sbin

$ ls -dalZ /sbin
drwxr-xr-x root root system_u:object_r:sbin_t:s0 /sbin

.



Relevant Pages

  • Re: Selinux so badly corrupted machine cant start
    ... I'm sorry that my response trying to help was unhelpful. ... I also have never had any problems with SELinux ... autorelabelling with enforcing enabled. ... and rebooting with enforcing off to avoid the need for a RescueCD ...
    (Fedora)
  • Re: preparing for selinux in FC3?
    ... # enforcing - SELinux security policy is enforced. ... # permissive - SELinux prints warnings instead of enforcing. ... # strict - Full SELinux protection. ... So at any time it is possible to boot in rescue mode, single user mode ...
    (Fedora)
  • Re: AW: SElinux boot error with new kernel and RHAS V4 U3
    ... # This file controls the state of SELinux on the system. ... # permissive - SELinux prints warnings instead of enforcing. ... I compiled and installed the 2.6.16.4 kernel from kernel.org, but a boot ...
    (RedHat)
  • Re: Do you use SELinux
    ... In permissive mode, security violations are logged but not enforced. ... This allows you to configure SELinux for your system prior to setting it to enforcing mode, which is a good alternative to simply disabling it as soon as it causes a problem. ...
    (Fedora)
  • RE: Telnet and RHEL4
    ... would be enough to change the warnings when logging in via telnet... ... 'General Red Hat Linux discussion list' ... There is no service called "selinux" running, ... > # permissive - SELinux prints warnings instead of enforcing. ...
    (RedHat)