-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 04/15/2011 09:07 AM, Szabo Akos wrote:
> Hi,
>
> On Thu, Apr 14, 2011 at 11:26:28AM -0400, Daniel J Walsh wrote:
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> On 04/14/2011 10:50 AM, Szabo Akos wrote:
>>> Hi,
>>>
>>> On Tue, 2011-04-12 at 08:59 +0200, mgrepl wrote:
>>>>>> Hi 2 all,
>>>>>>
>>>>>> As the
http://fedoraproject.org/wiki/SELinux/FedoraMLSHowto
said:
>>>>>>
>>>>>>
>>>>>> Configure the system to boot into run level 3 by default:
>>>>>>
>>>>>> perl -p -i -e
"s/^id:5:initdefault:/id:3:initdefault:/g" /etc/inittab
>>>>>>
>>>>>> The when SE Linux execute MLS Policy instead of targeted, the
system boots
>>>>>> always in runlevel3 mode?
>>>>>>
>>>>>> I would like to run PostgreSQL DBMS based on MLS security
policy.
>>>>>> But when the system boot in runlevel 3, I have som problems.
>>>>>>
>>>>>> Is there any Idea that I come back to previous run level?
>>>>>> How ever when I did it, my screen was blinking, then I have
nothing(black screen).
>>>>>>
>>>>>> The system is Fedora 14, I have just installed
selinux-policy-mls-3.9.7-38.fc14.noarch.rpm.
>>>>>>
>>>>>> Regards,
>>>>>> Flora
>>>
>>>>> You can run at Higher Runlevels the Runlevel 3 in Fedora. We only
>>>>> support Runlevel 3 in RHEL. (Server only mode).
>>>>>
>>>>> mls policy should mostly work on a desktop environment.
>>>> You might want to try to boot with
>>>>
>>>> enforcing=0
>>>>
>>>> on the kernel line.
>>>
>>> I try it on fedora 14, wothout succes, the X was killed /I'm using
>>> proprietary nvidia drv/, crontabs not working, etc.
>>
>> I would boot in permissive mode and send us the audit.log.
>
>
>
> Yes, of course, I attache it. If You need, I've got the dmesg output too, but
it's 72KB.
>
> Üdvözlettel:
> Fonya
>
> Küldetésem ösztönözni az ütemes akció-rádiuszt.
> PGP key ID F86614E5, GPG key ID 83AD9365
You are logging into the system as user_t, which is a non privledged
user and then trying to do administration. You want to setup your
account to login as staff_t and then newrole to sysadm_t or setup sudo
to automatically transition you to sysadm_t. Then you can do your admin
functions as sysadm_t.
No, I don't want to admin the system, but somehow I need to copy the
audit.log file :) /and starting auditd/.
Do You need another auditd log, when stating it with the system, and I
using my notebook, just a simple user?
--
Szabó Ákos