Re: [CentOS] SELinux - null security context

2009-01-29 Thread Michael Simpson
On 1/29/09, Rob Kampen wrote: . > Does anyone use SELinux on their work-station i.e. the place where you try > things out, debug things etc?? or is it really only for stable systems where > not many OS changes and new program trials occur? > I know that asterisk doesn't play nice with SELinux, eve

Re: [CentOS] SELinux - null security context

2009-01-28 Thread Rob Kampen
Craig White wrote: On Wed, 2009-01-28 at 23:00 -0500, Rob Kampen wrote: Last resort was the 'touch /.autorelabel' and reboot. This took nearly an hour but once it came up all was well. Thanks for the pointers Filipe. At what point would it be safe to go to enforcing? What logs should I be i

Re: [CentOS] SELinux - null security context

2009-01-28 Thread Craig White
On Wed, 2009-01-28 at 23:00 -0500, Rob Kampen wrote: > Last resort was the 'touch /.autorelabel' and reboot. This took nearly > an hour but once it came up all was well. > Thanks for the pointers Filipe. > At what point would it be safe to go to enforcing? What logs should I > be inspecting for war

Re: [CentOS] SELinux - null security context

2009-01-28 Thread Rob Kampen
Filipe Brandenburger wrote: Hi, 2009/1/28 Rob Kampen : I'm seeing this every hour when the hourly cron job runs NULL security context for user, but SELinux in permissive mode, continuing Try to use "ps -Z" to see if all your processes have appropriate security contexts. It's unlikel

Re: [CentOS] SELinux - null security context

2009-01-28 Thread Filipe Brandenburger
Hi, 2009/1/28 Rob Kampen : > I'm seeing this every hour when the hourly cron job runs > NULL security context for user, but SELinux in permissive mode, continuing Try to use "ps -Z" to see if all your processes have appropriate security contexts. It's unlikely (impossible?) that one of them will