does selinux work with non-fedora package ?

[ody quraviharto]

hi all,
I am a Fedora newbie interesting in selinux. here are some questions

1. does selinux work well with reiserfs filesystem ?
2. does selinux work well with postgresql rpm packages I downloaded
from postgresql site ?

thx very much

[Stephen Smalley]

On Mon, 2006-01-30 at 08:16 +0700, ody quraviharto wrote:
>  hi all,
>  I am a Fedora newbie interesting in selinux. here are some questions
>  
>  1. does selinux work well with reiserfs filesystem ? 
Not presently.  Support for using reiserfs xattrs with SELinux went into
Linux 2.6.12, but a change in Linux 2.6.14 to support atomic security
labeling of new inodes broke it again.  Getting it working again
shouldn't be too difficult, but requires someone who cares to either
make a patch and submit it to the reiserfs maintainers or to nag them
until they do it themselves.

>  2. does selinux work well with postgresql rpm packages I downloaded
>  from postgresql site ? 
It _should_, although there may be some variations in where the upstream
packages put their files or their configuration that may require
adjustment to the SELinux policy.

-- 
Stephen Smalley
National Security Agency

MySQL 5.0 and Fedora

[Tiziano]

Dear Friends

i'm letterally on shit with FEDORA CORE 3and MySQL 5.0.xxxfrom MySQL 
official website.

Practically MySQL works but doesn't work anymore with PHPADMIN...i've 
also updated php to the last version (from php.net)....but still problem...
Do you have any solution please ?

Thank you in advance, best regards


Tiziano

MySQL 5.0 and Fedora

[Stephen Smalley]

On Mon, 2006-01-30 at 15:35 +0100, Tiziano Demaria wrote:
>  Dear Friends
>  
>  i'm letterally on shit with FEDORA CORE 3and MySQL 5.0.xxxfrom MySQL 
>  official website.
>  
>  Practically MySQL works but doesn't work anymore with PHPADMIN...i've 
>  also updated php to the last version (from php.net)....but still problem...
>  Do you have any solution please ?
>  
>  Thank you in advance, best regards 
Make sure that your selinux-policy-targeted is up-to-date.

On FC3, look in /var/log/messages for "avc:  denied" messages.  Those
will show you SELinux permission denials.  audit2allow can be used to
turn those into allow rules to add to your policy, but be careful about
doing so blindly.

Certain booleans will let you customize behavior without adding new
allow rules, settable via setsebool or system-config-securitylevel GUI.
Since you mentioned php, read the contents of 'man httpd_selinux' and
look at your httpd boolean settings (getsebool -a | grep httpd).

-- 
Stephen Smalley
National Security Agency

MySQL 5.0 and Fedora

[Tiziano]

I've deactivated SELinux since 7 months due too much problmes...so now 
it's under normal linux...

Stephen Smalley wrote:

> On Mon, 2006-01-30 at 15:35 +0100, Tiziano Demaria wrote:
>   
>
> >Dear Friends
> >
> >i'm letterally on shit with FEDORA CORE 3and MySQL 5.0.xxxfrom MySQL 
> >official website.
> >
> >Practically MySQL works but doesn't work anymore with PHPADMIN...i've 
> >also updated php to the last version (from php.net)....but still problem...
> >Do you have any solution please ?
> >
> >Thank you in advance, best regards
> >    
> >
>
> Make sure that your selinux-policy-targeted is up-to-date.
>
> On FC3, look in /var/log/messages for "avc:  denied" messages.  Those
> will show you SELinux permission denials.  audit2allow can be used to
> turn those into allow rules to add to your policy, but be careful about
> doing so blindly.
>
> Certain booleans will let you customize behavior without adding new
> allow rules, settable via setsebool or system-config-securitylevel GUI.
> Since you mentioned php, read the contents of 'man httpd_selinux' and
> look at your httpd boolean settings (getsebool -a | grep httpd).
>
>   
>  
--

MySQL 5.0 and Fedora

[Stephen Smalley]

On Mon, 2006-01-30 at 16:30 +0100, Tiziano wrote:
>  I've deactivated SELinux since 7 months due too much
> problmes...so now 
>  it's under normal linux... 
Then post to fedora-list rather than fedora-selinux-list.  Much wider
audience, more likely to get better help about general Fedora issues
there.

-- 
Stephen Smalley
National Security Agency