On 10/14/2009 10:27 AM, Craig White wrote:
> On Wed, 2009-10-14 at 06:47 -0700, Vaughn Treude wrote:
>
>>> I have found SELinux to be much better in Fedora 11 that the problem
>>> that it was in F10. Eventually you want to try running with it
>>> enforcing.
>>>
>>>
>>>
>> I need to research SELinux; I'm not very familiar with what it
>> does.
>> Thanks for the feedback.
>>
> ----
> one of the reasons I suggested that you run 'fixfiles onboot' is that
> when you create files on other computers or in locations other than
> where they are stored, they will always have the wrong security context.
> 'fixfiles onboot' does a complete relabel of your files.
>
>
Sounds like I may also need to do this if I reboot in Centos and do
anything with the Fedora partition, and the reboot in Fedora. Am I right?
Vaughn
> The easiest way to get comfortable with SELinux is to put it into
> permissive mode, make sure you have setroubleshoot package installed and
> you will have most everything you need to deal with issues caused by
> installing new files/daemons.
>
> Once you have a handle on it, you can switch it to enforcing mode.
>
> If you ever switch SELinux to disabled and then want to switch it back,
> you MUST do a 'fixfiles onboot' to reboot because once it is turned off,
> all files will not have any security contexts when they are created.
>
> Craig
>
>
>
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)