October « 2008 « Faites que le rÃªve dÃ©vore votre vie afin que la vie ne dÃ©vore pas votre rÃªve

I’ve been using Red Hat Linux since version 5.2 (back in 1998, I’m sure I still have the CD’s somewhere) I then switched to Fedora after the RedHat/Fedora merge. Since then I’m regularly testing the Fedora bleeding-edge version aka Rawhide, mainly on my laptop.

I’ve always left SELinux on permissive mode because I was annoyed by the flow of error messages. Now Fedora has enabled setroubleshoot and the baloon messages keeps popping on my desktop. So I tried to finaly solve this. After searching the web and reading a few fora, I found this :

# semanage login -l
Login NameÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â  SELinux UserÂ Â Â Â Â Â Â Â Â Â Â Â Â  MLS/MCS Range
__default__Â Â Â Â Â Â Â Â Â Â Â Â Â Â  system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  s0
rootÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  rootÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  -s0:c0.c255
system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  SystemLow-SystemHigh

You can notice that there’s only root here, not my regular username

# semanage user -l
                LabelingÂ Â  MLS/Â Â Â Â Â Â  MLS/
SELinux UserÂ Â Â  PrefixÂ Â Â Â  MCS LevelÂ  MCS RangeÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  SELinux Roles
rootÂ Â Â Â Â Â Â Â Â Â Â  userÂ Â Â Â Â Â  s0Â Â Â Â Â Â Â Â  SystemLow-SystemHighÂ Â Â Â Â Â Â Â Â Â  staff_r sysadm_r system_r unconfined_r
staff_uÂ Â Â Â Â Â Â Â  userÂ Â Â Â Â Â  s0Â Â Â Â Â Â Â Â  SystemLow-SystemHighÂ Â Â Â Â Â Â Â Â Â  staff_r sysadm_r system_r
sysadm_uÂ Â Â Â Â Â Â  userÂ Â Â Â Â Â  s0Â Â Â Â Â Â Â Â  SystemLow-SystemHighÂ Â Â Â Â Â Â Â Â Â  sysadm_r
system_uÂ Â Â Â Â Â Â  userÂ Â Â Â Â Â  s0Â Â Â Â Â Â Â Â  SystemLow-SystemHighÂ Â Â Â Â Â Â Â Â Â  system_r
user_uÂ Â Â Â Â Â Â Â Â  userÂ Â Â Â Â Â  s0Â Â Â Â Â Â Â Â  s0Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  user_r

These are the profiles available for use. After searching a little bit again, I ran this command:

# semanage login -a -s user_u jeo

“jeo” is my regular username ; now everything looks fine:

# semanage login -l
Login NameÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â  SELinux UserÂ Â Â Â Â Â Â Â Â Â Â Â Â  MLS/MCS Range
__default__Â Â Â Â Â Â Â Â Â Â Â Â Â Â  system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  s0
jeoÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  user_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  s0
rootÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  rootÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  -s0:c0.c255
system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  system_uÂ Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â Â  SystemLow-SystemHigh

No more annoying messages (well, sort of ; there’re some left, probably missing in the regular policy package) Great!

Tags:

Faites que le rÃªve dÃ©vore votre vie afin que la vie ne dÃ©vore pas votre rÃªve

Archive for October, 2008

Fedora rawhide && SELinux

Recent Posts

Meta