Security and PrivacySadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.
Recently I had to edit Selinux to let it work with samba. However, I accidentaly checked under admin: 'Do not allow any process to change the Selinux policy'. So, I cannot edit the selinux policy anymore. This seems like an beginners error, but I can't find a work-around for it
I would think you can just uncheck that in system-config-securitylevel. Or maybe you can reboot with it disabled. The FAQ may help: http://fedora.redhat.com/docs/selinux-faq/
I would think you can just uncheck that in system-config-securitylevel. Or maybe you can reboot with it disabled. The FAQ may help: http://fedora.redhat.com/docs/selinux-faq/
That is just the weird part, I can not edit the policy. It's useless, saving en then reopening it shows that it is still checked. I do get AVC errors, but I can't edit the policy. For now, I completely disabled it.
Setting this boolean, basically removes any capability of modifying selinux policy in enforcing mode. So if you want to modify the policy, you need to boot in permissive mode, or single user mode.
enforcing=0 on the boot line will boot in permissive mode.
Setting this boolean, basically removes any capability of modifying selinux policy in enforcing mode. So if you want to modify the policy, you need to boot in permissive mode, or single user mode.
enforcing=0 on the boot line will boot in permissive mode.
I already solved that, but thanks . In fact, I think I'm going to write a good howto for Selinux. Because it's actually really easy to use.
. In fact, I think I'm going to write a good howto for Selinux. Because it's actually really easy to use.
Linear Mode
