uninstall SElinux Fedora 16

jdmBlue · #1 8th April 2012, 10:01 PM

I would like to uninstall SElinux in Fedora 16. I found a forum thread dating back to 2006 that says it is safe to do so except keep the library files. Can someone tell if this is stiil the same as of today (04-08-12).. with Fedora 16?

Thank You

nonamedotc · #2 8th April 2012, 10:46 PM

I do not know if you can remove selinux completely. It is possible to disable that completely. Just change the value for SELINUX in /etc/selinux/config to disabled and done!

From the /etc/selinux/config file,

Quote:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.

jdmBlue · #3 8th April 2012, 11:18 PM

Quote:

Originally Posted by nonamedotc

I do not know if you can remove selinux completely. It is possible to disable that completely. Just change the value for SELINUX in /etc/selinux/config to disabled and done!

From the /etc/selinux/config file,

I tried that and it would not work properly. If at all possible I would like to remove SElinux and avoid these type troubles all together.

---------- Post added at 05:18 PM ---------- Previous post was at 05:01 PM ----------

This is the msg I get when I type "sudo gedit /etc/sysconfig/selinux" :

[jeff@localhost ~]$ sudo gedit /etc/sysconfiq/selinux
[sudo] password for jeff:

(gedit:1620): Gtk-WARNING **: Attempting to store changes into `/root/.local/share/recently-used.xbel', but failed: Failed to create file '/root/.local/share/recently-used.xbel.IC0ICW': No such file or directory

(gedit:1620): Gtk-WARNING **: Attempting to set the permissions of `/root/.local/share/recently-used.xbel', but failed: No such file or directory

(gedit:1620): Gtk-WARNING **: Attempting to store changes into `/root/.local/share/recently-used.xbel', but failed: Failed to create file '/root/.local/share/recently-used.xbel.V9HFCW': No such file or directory

(gedit:1620): Gtk-WARNING **: Attempting to set the permissions of `/root/.local/share/recently-used.xbel', but failed: No such file or directory
[jeff@localhost ~]$

also I get the gedit GUI with no text. Do I just type " SELINUX=disabled" into that box?

I`ve just moved to Fedora from openSuse and I`m not famaliar with gedit.

Thank You

secipolla · #4 8th April 2012, 11:24 PM

How didn't it work?
Did you set it to disabled?
-edit-
ok, that's a problem with opening GNOME apps as root for the first time. To solve it you can just

Code:

sudo touch /root/.local/share/recently-used.xbel

and then it should work.
You can also use nano and edit the file in the terminal

Code:

sudo nano /etc/selinux/config

jdmBlue · #5 8th April 2012, 11:26 PM

I`m trying to to understand how to properly set to disabled. See above post.

secipolla · #6 8th April 2012, 11:28 PM

Code:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

nonamedotc · #7 8th April 2012, 11:31 PM

This looks like a permissions issue. Try this

Code:

su -
[root password]
vim /etc/selinux/config

After this, you should be able to edit the file.

marko · #8 8th April 2012, 11:32 PM

I think the problem is that you're trying to run a GUI editor as root via sudo and the environment isn't set up right that way. Either use "su -" to become root and then run gedit from the terminal as root or probably better is to avoid using a GUI app as root and edit the file with a text style editor like "nano"

Option 1)

Quote:

su -
<root password>
yum install nano (only needed if you don't have it installed already)

nano /etc/selinux/config
setenforce 0

That last "setenforce 0" is to turn off selinux right now, editing the config file only changes selinux upon the next boot up

Option 2)
Install system-config-selinux and use it to set selinux to disabled

Quote:

su -
<root password>
yum install system-config-selinux (only do this if not installed already)

system-config-selinux

If you use the system-config-selinux tool, select "Status" from the left menu and set the menus

System Default Enforcing Mode -> Disabled or Permissive
Current Enforcing Mode -> Permissive

close the tool, the changes to /etc/selinux/config are automatically written

jdmBlue · #9 8th April 2012, 11:39 PM

Quote:

Originally Posted by secipolla

How didn't it work?
Did you set it to disabled?
-edit-
ok, that's a problem with opening GNOME apps as root for the first time. To solve it you can just

Code:

sudo touch /root/.local/share/recently-used.xbel

and then it should work.
You can also use nano and edit the file in the terminal

Code:

sudo nano /etc/selinux/config

Still no good but thank you.

[jeff@localhost ~]$ sudo touch /root/.local/share/recently-used.xbel
[sudo] password for jeff:
touch: cannot touch `/root/.local/share/recently-used.xbel': No such file or directory
[jeff@localhost ~]$

---------- Post added at 05:39 PM ---------- Previous post was at 05:35 PM ----------

OK trying the other resolutions....

Thank you Thank you

robertdaleweir · #10 9th April 2012, 12:12 AM

Quote:

Originally Posted by jdmBlue

Still no good but thank you.

[jeff@localhost ~]$ sudo touch /root/.local/share/recently-used.xbel
[sudo] password for jeff:
touch: cannot touch `/root/.local/share/recently-used.xbel': No such file or directory
[jeff@localhost ~]$

---------- Post added at 05:39 PM ---------- Previous post was at 05:35 PM ----------

OK trying the other resolutions....

Thank you Thank you

Hi jdmBlue
My /etc/selinux/config files is as follows: --->

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected,
# mls - Multi Level Security protection.
#SELINUXTYPE=targeted
SELINUX=disabled
<----
It seems to work but I cannot see why it has 'SELINUX=enforcing' and then 'SELINUX=disabled' later in the file. I suspect the last one overrides the first, but at least it does stop Selinux.
Cheers...

bbfuller · #11 9th April 2012, 12:16 AM

I think you'll find that:

Quote:

yum install system-config-selinux (only do this if not installed already)

no longer works.

system-config-selinux no longer exists as a separate package.

Code:

yum install policycoreutils-gui

includes it though.

Lots of useful options in there for allowing particular things without taking the draconian step of turning it off all together - although it will do that as well.

***DBelton*** · #12 9th April 2012, 12:38 AM

Quote:

Originally Posted by robertdaleweir

Hi jdmBlue
My /etc/selinux/config files is as follows: --->

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - No SELinux policy is loaded.
SELINUX=enforcing
# SELINUXTYPE= can take one of these two values:
# targeted - Targeted processes are protected,
# mls - Multi Level Security protection.
#SELINUXTYPE=targeted
SELINUX=disabled
<----
It seems to work but I cannot see why it has 'SELINUX=enforcing' and then 'SELINUX=disabled' later in the file. I suspect the last one overrides the first, but at least it does stop Selinux.
Cheers...

The later SELINUX=disabled has been added. You should remove that line, and change the SELINUX=enabled line to SELINUX=disabled.

It should look like this when you get done:

Code:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

robertdaleweir · #13 9th April 2012, 02:06 AM

Quote:

Originally Posted by DBelton

The later SELINUX=disabled has been added. You should remove that line, and change the SELINUX=enabled line to SELINUX=disabled.

It should look like this when you get done:

Code:

# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of these two values:
#     targeted - Targeted processes are protected,
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted

Hi DBelton
I will make those changes. Thank you so much for the details...