Security Level disabled

TheBadger · #1 13th November 2004, 12:01 AM

After the updates today 11/12/04, my Security Level will no longer launch. One update was libselunix.?.? and I can't remember the other one. When I first restarted my mouse was gone, after a second reboot everything seemed to work except my security levels GUI. Is there a way to do this comand line? I have to turn my eth0 to trusted to use my network Windoz box.

sayeeth · #2 13th November 2004, 01:13 AM

I have the same problem. Here is the error message when I attempt to run system-config-securitylevel.

Code:

[sayeeth@flirt ~]$ system-config-securitylevel
Traceback (most recent call last):
  File "/usr/share/system-config-securitylevel/system-config-securitylevel.py",line 18, in ?
    app.stand_alone()
  File "/usr/share/system-config-securitylevel/securitylevel.py", line 427, in stand_alone
    self.selinuxPage = selinuxPage.selinuxPage()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 329, in __init__
    self.refreshTunables(self.initialtype)
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 427, in refreshTunables
    self.loadBooleans()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 418, in loadBooleans
    on=rec[3]=="1"
IndexError: list index out of range
[sayeeth@flirt ~]$

jcridge · #3 13th November 2004, 03:05 PM

I'm getting the same thing here. Updated yesterday on 11/12/04 and now I receive the following errors when I run system-config-securitylevel as root.

Code:

[root@ridge-md-xp jcridge]# system-config-securitylevel
Traceback (most recent call last):
  File "/usr/share/system-config-securitylevel/system-config-securitylevel.py", line 18, in ?
    app.stand_alone()
  File "/usr/share/system-config-securitylevel/securitylevel.py", line 427, in stand_alone
    self.selinuxPage = selinuxPage.selinuxPage()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 329, in __init__
    self.refreshTunables(self.initialtype)
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 427, in refreshTunables
    self.loadBooleans()
  File "/usr/share/system-config-securitylevel/selinuxPage.py", line 418, in loadBooleans
    on=rec[3]=="1"
IndexError: list index out of range

Now I'm wondering what security level my system is actually running at?

Any word when this might get corrected?

jcridge · #4 13th November 2004, 03:41 PM

This issue has been entered into BUGZILLA at: https://bugzilla.redhat.com/bugzilla....cgi?id=139166

sayeeth · #5 13th November 2004, 04:04 PM

Quote:

Originally Posted by jcridge

This issue has been entered into BUGZILLA at: https://bugzilla.redhat.com/bugzilla....cgi?id=139166

Alright dude, thanks.

TheBadger · #6 13th November 2004, 04:32 PM

I found the system-config-securitylevel command and get the same error. I had set my eth0 to trusted to share with my Windoz box. I guess it's stuck there now. I( would like to regain control over my firewall and Selunix.
Is having the eth0 set to trusted a bad thing for the net? I use the net lots more than file sharing.

k4dgw · #7 14th November 2004, 04:25 AM

Apparently that issue has been marked as a duplicate of this one

https://bugzilla.redhat.com/bugzilla....cgi?id=139155

Still not sure what we are supposed to do to fix it. It appears they have another patch/update coming out with a fix. I tried googling around for the update in there at the bottom, but I could not find anything.

Dave
-=K4DGW=-

yeauch · #8 14th November 2004, 09:21 AM

Arghh... no wonder mine isn't working as well. I do get the same error messages as the above. Looking forward to see it fixed.

RedFedora · #9 14th November 2004, 04:52 PM

I performed the same updates, no problems here with the security level. I wonder why that is?

jcridge · #10 14th November 2004, 05:50 PM

Quote:

Originally Posted by RedFedora

I performed the same updates, no problems here with the security level. I wonder why that is?

Do you have SELinux enabled or disabled?

girtsch · #11 15th November 2004, 01:26 PM

how is it possible to install this patch:

########### patch ####################
--- system-config-securitylevel/selinuxPage.py.orig 2004-11-13 11:31:08.321869987 +0000
+++ system-config-securitylevel/selinuxPage.py 2004-11-13 11:31:54.182987016 +0000
@@ -415,7 +415,7 @@ class selinuxPage:
for i in booleansList:
rec=i.split()
name=rec[0]
- on=rec[3]=="1"
+ on=rec[2]=="active"
self.modifiers.add(name,Boolean(name,on,self.boolc onf[self.getType()].has_key(name)))

def refreshTunables(self,type):
########### patch ####################

i am a bit a linux noob, can anyone tell me what to do?
thx

girtsch · #12 15th November 2004, 03:55 PM

ok it works now

k4dgw · #13 15th November 2004, 04:34 PM

What fixed it?

Dave
-=K4DGW=-

PeTzZz · #14 15th November 2004, 04:48 PM

I downgraded to an older version as he first suggested me there.
First I uninstalled libselinux-devel as it was needed:

Code:

#yum remove libselinux-devel

Then used command

Code:

#rpm --force -Uvh libselinux-1.17.14-1.i386.rpm

to downgrade to the older one. You have to be in the folder where the older rpm is to use that command. You can find it on the first Fedora cd. Then you should install libselinux-devel from the second or third cd.

Thats it. But you can also use that patch, but I don't know how to use it. I stay with the downgrade, I don't need more. There will be an update for this problem soon as I read there.

djf_jeff · #15 15th November 2004, 04:59 PM

You just need to modify /usr/share/system-config-securitylevel/selinuxPage.py at line 418 and replace

on=rec[3]=="1" by on=rec[2]=="active"