SELinux and I are no longer friends!

***Dan*** · #1 6th April 2011, 03:55 PM

Up until now, we've gotten along reasonably well, but that all changed when I tried to add my printer this morning. I guess it woke up cranky. I suspected it might get ugly about a few things I was going to try today, so I appended enforcing=0 to the kernel boot line in Grub, and it booted just hunky-dorey. Until I plugged in the printer. Then it got just as ugly as I thought it would ... if it were allowed to be. The theory being, that boot appendage should have muzzled it.

It didn't. <..

..>

And ... of course ... there's no SE dialog/tweak tool included in F15 at the moment.

So ... if it won't be tamed ... and it won't be polite ... how do I shoot this little beasty behind the left ear? <..

..>

***bob*** · #2 6th April 2011, 04:03 PM

Bugzilla, oh Bugzilla, my friend! And, be sure you print out the details for later review....oh wait....

PabloTwo · #3 6th April 2011, 04:09 PM

Hii Dan,

Are you saying that there is no getenforce or, more importantly, setenforce command(s) in F15?

Normally, at the command prompt, "# setenforce permissive" or "# setenforce 0" will put SELinux into permissive mode.

***Dan*** · #4 6th April 2011, 04:16 PM

Oh, they seem to be there ... and report as permissive. Then it promptly slaps down a number of functions. PulseAudio among them ... which I kind of viewed with a secret little smile, but it also still persists in killing my printer.

soundfreely · #5 6th April 2011, 04:48 PM

I had a similar issue. In my case, I had also disabled SElinux in the kernel line of grub. Then installed some updates and got the latest SELinux policies (just via yum update). However, I believe the policies aren't applied when SELinux is disabled - so, "fixfiles onboot" needs to be run.

***Dan*** · #6 6th April 2011, 05:04 PM

Oh, my! This is sooooo broken ... again. Just rebooted and got this ... again.

I'm feeling an extensive release date slip coming on. <..

..>

***Dan*** · #7 6th April 2011, 05:58 PM

Okey Jokey. By way of much puzzling and a relabel -- and enforcing=0 (and jerking the USB printer connection out before/while the system boots), we're back into GUI.

And the printer is installed, for the most part. It printed a test page anyway. My question now is ... why the devil do I have to resort to a terminal to open the hp-toolbox?

GoinEasy9 · #8 6th April 2011, 07:17 PM

I had to do a relabel before my problems went away. I'm back to enforcing without problems.

mariuszs · #9 6th April 2011, 08:09 PM

After weekend update I cant boot FC15

http://twitpic.com/4hol1t

Quote:

Failed to load selinux policy....

I have selinux disabled

CronoCloud · #10 7th April 2011, 01:40 AM

Quote:

Originally Posted by Dan

Okey Jokey. By way of much puzzling and a relabel -- and enforcing=0 (and jerking the USB printer connection out before/while the system boots), we're back into GUI.

SELinux is teh devil, and as a desktop user...I have it disabled.

Quote:

My question now is ... why the devil do I have to resort to a terminal to open the hp-toolbox?

You shouldn't, check for the F15 equivalent to:

System>Administration>HP Device Manager

Ron Rogers Jr. (CronoCloud)

***DBelton*** · #11 7th April 2011, 01:52 AM

well Dan, I too am having selinux troubles with pulseaudio. so don't feel too special

I am ghetting ready to reboot anyway, so will try a complete relabel then and see what happens.

***Dan*** · #12 7th April 2011, 01:55 AM

Quote:

Originally Posted by Ron

... check for the F15 equivalent to: System>Administration>HP Device Manager

Hmmmm.

Yeah. That sounds like a helluva good idea. I'll do that. But ... the challenge is the menu. Finding it that is. Gnome 3 (Gnome shell) is sorta lean on menus.

Quote:

Originally Posted by the other Dan

... I am getting ready to reboot anyway, so will try a complete relabel then and see what happens.

That's what I did. Seemed to work, too. Just don't leave your USB HP 7000 series printer plugged in when you re-boot. It gets a little ugly if you do. <..

..>

***DBelton*** · #13 7th April 2011, 02:34 AM

didn't work for me, though

I did a complete relabel, and I still get selinux errors on pulseaudio on boot..

Code:

Apr  6 20:28:02 tower11 setroubleshoot: SELinux is preventing /usr/bin/pulseaudio from open access on the file c189:128. For complete SELinux messages. run sealert -l 8dfc375c-f180-4ef1-a029-70922471eea9
Apr  6 20:28:02 tower11 setroubleshoot: SELinux is preventing /usr/bin/pulseaudio from open access on the file +sound:card0. For complete SELinux messages. run sealert -l 8dfc375c-f180-4ef1-a029-70922471eea9

CronoCloud · #14 7th April 2011, 02:38 AM

Quote:

Originally Posted by Dan

Yeah. That sounds like a helluva good idea. I'll do that. But ... the challenge is the menu. Finding it that is. Gnome 3 (Gnome shell) is sorta lean on menus.

It's that BAD? I hadn't been following the ruckus over gnome shell/gnome 3 closely so I didn't know. So no Applications, Places, and System menu's on a nice panel/taskbar? What were they thinking?

Ron Rogers Jr. (CronoCloud)

***DBelton*** · #15 7th April 2011, 02:48 AM

no application, places and system menu's at all in gnome 3. Makes it really hard to find anything.

And when you get to gnome 3 shell.. you will forget what a panel and taskbar is as well. They are gone.

You do however gain a screen full of super huge icons instead of your applications menu

They must think that all users need to wear coke bottle thick glasses and still can't see anything.

I tried to change the size of the icons in the css file, but I ended up with small icons that had the large image in them, just cut off. not scaled.