1

Where are the booleans for SELinux stored?

view story
linux-howto

http://www.linuxquestions.org – Hello: I always thought that whenever /usr/sbin/setsebool was used, it would write either a "0" or a "1" into the corresponding boolean file. All SELinux boolean files are in /selinux/booleans but If I check, for example, this boolean ... $ sudo /usr/sbin/getsebool ftp_home_dir ftp_home_dir --> on It returns a positive, but if I do $ sudo less /selinux/booleans/ftp_home_dir I get ... read error (Press Return) Furthermore, if I list the boolean file itself, it shows it to be empty $ sudo ls -l /selinux/booleans/ftp_home_dir -rw-r--r-- 1 root root 0 Aug 9 11:09 /se (HowTos)

dayu's picture
Submitted by dayu on 09/24/2010

Stories similar to Where are the booleans for SELinux stored?

I've been trying to get sound during logout (like with desktop-login). Redirecting Canberra-gtk-play to a different path solved the login problem since "--id=desktop-login" failed. I achieved that is using the System->Startup Applications in the menu.

Sys: RHEL 5 Policy version: 21 Policy: Targeted Mode: Enforcing

Hello friends,

I am learning SELinux from LinuxCBT and I'm stuck at one place. Now video is on RHEL 4 (so tell me if things has changed since, cause I can't find anything related) shows how to disable SELinux security on httpd. It's following way

Does anyone know which sebool it is to allow httpd write access to /home/user/html? When I disable selinux echo 0 > /selinux/enforce I can write, so definitely selinux. Just don't know which one is the right one without opening a big hole and Google isn't being much help.

#[/home]ls -Z drwxr-x---.

Sorry, I forget to say I was using "targeted"[root@kgcc70 isos]# sestatusSELinux status: enabledSELinuxfs mount: ... [by KenGreen]

Hi I am new to the SELINUX and I have noticed the command setsebool take longer time than other linux commands. Such as:

setsebool -P ftp_home_dir ON

Out of curiosity I want to know why "setsebool" command needs such a long time to complete the task?

Debian: SELinux not enabled 34 weeks 6 days ago

I'm trying to setup SELinux on Debian 6 according to (the instructions reported on the Debian wiki).

I've run this commands:

apt-get install selinux-basics selinux-policy-default selinux-activate

After reboot, the system should have taken a while to label the filesystems on boot and then rebooted a second time when that was complete.

A quote from RHCE exam prep book by A. Ghori:

Quote:

Allow only BIND daemon to be able to read named.conf by altering the SELinux file context to named_conf_t ...:

Code: chcon -t named_conf_t named.conf

That all being well and good, what if I forget it is named_conf_t and find myself guessing, what on Earth this parameter should be? named_t?

I'm following the Debian SELinux setup guide with my Linux Mint Debian Edition system. I installed the necessary packages:

sudo aptitude install selinux-basics selinux-policy-default selinux-utils policycoreutils

Activated SELinux and rebooted twice:

sudo selinux-activate

Checked the installation.

Have you looked in /etc/sysconfig/named for some hints about SELinux - there's a boolean you may need to enable if SELinux is enabled or a setting in that file if it's not.Edi... [by TrevorH]