Selinux Problems

Andrew Jamison linux at blogmethat.net
Mon Oct 5 18:44:26 UTC 2009


> On Mon, Oct 05, 2009 at 14:08:26 -0400,
>   Jim <mickeyboa at sbcglobal.net> wrote:
> > FC11/Kde
> > 
> > Trying to print on a Samsung CLX-3175FN.
> > Selinux is playing havoc with printer drivers, these drivers are
> > from Samsung and I'm getting many Selinux Alerts, to many to keep
> > running Restorecon.
> > The printing is coming out with double columns with 1/8" white lines
> > down through text or pictures.
> > There are no GPL drivers for this printer, it's to New !
> > 
> > If I disable Selinux, the printer will print normal.
> > 
> > How do I relabel all the files on the computer ?
> > do I relabel from telinit 3 or what ?
> 
> touch /.autorelabel
> and then reboot.
> 
I usually start my fresh fedora install with SEL in permissive to catch
all the AVC Denials then after i can run my machine with little to no
denials i switch back to enforcing.
> However, restorecon -r will probably be easy enough as I suspect your driver
> only has put files under a few directories. Since it is unlikely that the
> relabel would affect the labels of long running processes, you could try
> restorecon -r / and skip the reboot if you can't limit the possible locations
> of files installed by the driver.
> 
> Also note that if you actually disabled selinux and didn't just switch
> to permissive, you probably should do a full relabel since files created when
> selinux is disabled don't get labelled.
> 
If I am not mistaken once you disable SEL it requires a full relabel on
turning it back on even if you have not changed anything since you
turned it off.




More information about the users mailing list