snmp Permission denied on mounted filesystems
Sandro Janke
gui1ty_fedora at penguinpee.nl
Thu Apr 15 23:11:23 UTC 2010
On 04/16/2010 12:33 AM, Paul Ward wrote:
>> What does 'rpm -qv selinux-policy-targeted' say?
>> What are the settings in /etc/selinux/config?
>
> My server shows the following selinux packages.
>
> selinux-policy-targeted-1.17.30-2.152.el4
> selinux-policy-targeted-sources-1.17.30-2.152.el4
>
> I have run:
> snmpwalk -v 2c -c public .iso
> cd /etc/selinux/targeted/src/policy
> audit2allow -d -l -o domains/misc/local.te
> make load
>
> Until no more errors were found, this fixed theoriginal errors from
> selinux, but not the permissions.
>
>> Try running restorecon -R -v /home
>
> If I run
>
> restorecon -R -v /home
>
> Would this affect a production servers running or should I do this in
> a mainaintance window?
Well, you can try to run it with the -n switch first to show you what
would happen. According to the man page: "It can be run at any time to
correct errors..."
> On 15 April 2010 19:05, Sandro Janke <gui1ty_fedora at penguinpee.nl> wrote:
>> On 04/15/2010 06:49 AM, Paul Ward wrote:
>>> Hi all,
>>>
>>> I am sure this comes up a lot but have spent hours trying to find th
>>> eanswers with no success apart from disabling selinux which I don't
>>> want to do.
>>>
>>> Apr 15 16:48:26 sargas snmpd[23987]: /home/appl: Permission denied
>>>
>>> The following filesystems are mounted with same issue.
>>>
>>> /dev/sda7 3.9G 427M 3.3G 12% /home/appl
>>> /dev/sda6 4.0G 2.7G 1.2G 71% /home/users
>>> /dev/sda8 3.9G 2.5G 1.2G 68% /home/work
>>>
>>> ls -ldZ /home/appl/
>>> drwxr-xr-x root root /home/appl/
>>
>> This shows that the directory has not been labeled, yet.
>>
>>> /usr/sbin/sestatus
>>> SELinux status: enabled
>>> SELinuxfs mount: /selinux
>>> Current mode: enforcing
>>>
>>
>> Could it be that you don't have any policy package installed?
>>
>> What does 'rpm -qv selinux-policy-targeted' say?
>> What are the settings in /etc/selinux/config?
>>
>>> What do I need to do to fix this chcon? If so what is the full comman
>>> / context to enter?
>>>
>>> Thanks
>>> --
>>> selinux mailing list
>>> selinux at lists.fedoraproject.org
>>> https://admin.fedoraproject.org/mailman/listinfo/selinux
>>
>>
> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux
More information about the selinux
mailing list