selinux denies X, but can get in via permissive mode

Antonio Olivares olivares14031 at yahoo.com
Thu Apr 17 00:52:57 UTC 2008


No, I tried 
# touch ./autorelabel
# reboot,

but same trouble continues.  I have to run enforcing=0 to allow this machine to function.  

Thanks,

Antonio 

----- Original Message ----
From: max <maximilianbianco at gmail.com>
To: Antonio Olivares <olivares14031 at yahoo.com>
Sent: Wednesday, April 16, 2008 8:24:21 PM
Subject: Re: selinux denies X, but can get in via permissive mode

Antonio Olivares wrote:
> Dear all,
> 
> *** fedora 7 ==> Fedora rawhide machine.
> 
> booting with enforcing=0 parameter.  Could not su - 
> before, but with enforcing=0 can now.  The following
> warning comes up.  
> 
> How can I fix to boot normally,
> 
> Thanks,
> 
> Antonio 
> 
> 
> Summary:
> 
> SELinux prevented X from using the terminal /dev/tty7.
> 
> Detailed Description:
> 
> [SELinux is in permissive mode, the operation would
> have been denied but was
> permitted due to permissive mode.]
> 
> SELinux prevented X from using the terminal /dev/tty7.
> In most cases daemons do
> not need to interact with the terminal, usually these
> avc messages can be
> ignored. All of the confined daemons should have
> dontaudit rules around using
> the terminal. Please file a bug report
> (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
> against this selinux-policy.
> If you would like to allow all daemons to interact
> with the terminal, you can
> turn on the allow_daemons_use_tty boolean.
> 
> Allowing Access:
> 
> Changing the "allow_daemons_use_tty" boolean to true
> will allow this access:
> "setsebool -P allow_daemons_use_tty=1."
> 
> Fix Command:
> 
> setsebool -P allow_daemons_use_tty=1
> 
Did you try the suggested commands?

Max





      ____________________________________________________________________________________
Be a better friend, newshound, and 
know-it-all with Yahoo! Mobile.  Try it now.  http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ




More information about the test mailing list