Security Level disabled

[TheBadger]

After the updates today 11/12/04, my Security Level will no longer launch. One update was libselunix.?.? and I can't remember the other one. When I first restarted my mouse was gone, after a second reboot everything seemed to work except my security levels GUI. Is there a way to do this comand line? I have to turn my eth0 to trusted to use my network Windoz box.

[sayeeth]

I have the same problem. Here is the error message when I attempt to run system-config-securitylevel.
[sayeeth@flirt ~]$ system-config-securitylevel
Traceback (most recent call last):
File "/usr/share/system-config-securitylevel/system-config-securitylevel.py",line 18, in ?
app.stand_alone()
File "/usr/share/system-config-securitylevel/securitylevel.py", line 427, in stand_alone
self.selinuxPage = selinuxPage.selinuxPage()
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 329, in __init__
self.refreshTunables(self.initialtype)
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 427, in refreshTunables
self.loadBooleans()
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 418, in loadBooleans
on=rec[3]=="1"
IndexError: list index out of range
[sayeeth@flirt ~]$

[jcridge]

I'm getting the same thing here. Updated yesterday on 11/12/04 and now I receive the following errors when I run system-config-securitylevel as root. :eek:



[root@ridge-md-xp jcridge]# system-config-securitylevel
Traceback (most recent call last):
File "/usr/share/system-config-securitylevel/system-config-securitylevel.py", line 18, in ?
app.stand_alone()
File "/usr/share/system-config-securitylevel/securitylevel.py", line 427, in stand_alone
self.selinuxPage = selinuxPage.selinuxPage()
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 329, in __init__
self.refreshTunables(self.initialtype)
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 427, in refreshTunables
self.loadBooleans()
File "/usr/share/system-config-securitylevel/selinuxPage.py", line 418, in loadBooleans
on=rec[3]=="1"
IndexError: list index out of range


Now I'm wondering what security level my system is actually running at?

Any word when this might get corrected?

[jcridge]

This issue has been entered into BUGZILLA at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=139166

[sayeeth]

This issue has been entered into BUGZILLA at: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=139166

Alright dude, thanks. :)

[TheBadger]

I found the system-config-securitylevel command and get the same error. I had set my eth0 to trusted to share with my Windoz box. I guess it's stuck there now. I( would like to regain control over my firewall and Selunix.
Is having the eth0 set to trusted a bad thing for the net? I use the net lots more than file sharing.

[k4dgw]

Apparently that issue has been marked as a duplicate of this one

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=139155

Still not sure what we are supposed to do to fix it. It appears they have another patch/update coming out with a fix. I tried googling around for the update in there at the bottom, but I could not find anything.

Dave
-=K4DGW=-

[yeauch]

Arghh... no wonder mine isn't working as well. I do get the same error messages as the above. Looking forward to see it fixed. :)

[RedFedora]

I performed the same updates, no problems here with the security level. I wonder why that is?

[jcridge]

I performed the same updates, no problems here with the security level. I wonder why that is?


Do you have SELinux enabled or disabled?

[girtsch]

how is it possible to install this patch:

########### patch ####################
--- system-config-securitylevel/selinuxPage.py.orig 2004-11-13 11:31:08.321869987 +0000
+++ system-config-securitylevel/selinuxPage.py 2004-11-13 11:31:54.182987016 +0000
@@ -415,7 +415,7 @@ class selinuxPage:
for i in booleansList:
rec=i.split()
name=rec[0]
- on=rec[3]=="1"
+ on=rec[2]=="active"
self.modifiers.add(name,Boolean(name,on,self.boolc onf[self.getType()].has_key(name)))

def refreshTunables(self,type):
########### patch ####################

i am a bit a linux noob, can anyone tell me what to do?
thx

[girtsch]

ok it works now

[k4dgw]

What fixed it?

Dave
-=K4DGW=-

[PeTzZz]

I downgraded to an older version as he first suggested me there.
First I uninstalled libselinux-devel as it was needed:
#yum remove libselinux-devel
Then used command
#rpm --force -Uvh libselinux-1.17.14-1.i386.rpm
to downgrade to the older one. You have to be in the folder where the older rpm is to use that command. You can find it on the first Fedora cd. Then you should install libselinux-devel from the second or third cd.

Thats it. But you can also use that patch, but I don't know how to use it. I stay with the downgrade, I don't need more. There will be an update for this problem soon as I read there.

[djf_jeff]

You just need to modify /usr/share/system-config-securitylevel/selinuxPage.py at line 418 and replace

on=rec[3]=="1" by on=rec[2]=="active"

[girtsch]

with the patch it also works good.

[TheBadger]

I may have to do one of these modfications. My 12 updates today still left Security-level disabled :(

[toxicshock]

You just need to modify /usr/share/system-config-securitylevel/selinuxPage.py at line 418 and replace
on=rec[3]=="1" by on=rec[2]=="active"

Thanks for the tip. Edited the file on my 3 PCs and it worked fine.