Re: [gentoo-hardened] permission problem in /etc

2012-03-13 Thread Sven Vermeulen
On Mon, Mar 12, 2012 at 08:15:50PM -0400, Alain Toussaint wrote: > In the end, this is no longer apropos (for now) because I transferred all > my mail setup to google apps for business but I got a new spare computer > which I will use for R&D of a numbers of projects including developing > policy f

RE: [gentoo-hardened] permission problem in /etc

2012-03-12 Thread Alain Toussaint
> > Pardon me for the dumb question but I'm having a migraine and must > prepare > > for a midterm tomorrow; > > > > > allow dovecot_t dovecot_etc_t:file read_file_perms; > > > > How do I do that? :) > > > Hmm either I forgot to reply, or the reply didn't reach my mailbox, so > here > goes the answ

Re: [gentoo-hardened] permission problem in /etc

2012-03-12 Thread Sven Vermeulen
On Mon, Feb 20, 2012 at 05:23:11PM -0500, Alain Toussaint wrote: > Pardon me for the dumb question but I'm having a migraine and must prepare > for a midterm tomorrow; > > > allow dovecot_t dovecot_etc_t:file read_file_perms; > > How do I do that? :) Hmm either I forgot to reply, or the reply d

RE: [gentoo-hardened] permission problem in /etc

2012-02-20 Thread Alain Toussaint
Pardon me for the dumb question but I'm having a migraine and must prepare for a midterm tomorrow; > allow dovecot_t dovecot_etc_t:file read_file_perms; How do I do that? :) Alain

Re: [gentoo-hardened] permission problem in /etc

2012-02-20 Thread Sven Vermeulen
On Sun, Feb 19, 2012 at 08:12:39PM -0500, Alain Toussaint wrote: > I did that. I rebooted into permissive mode, ran rlpkg -a -r and rebooted > into enforcing mode. The result were the same under root and I've tried with > my sysadm_r user but in the sysadm_r user, I could see all the permission in

RE: [gentoo-hardened] permission problem in /etc

2012-02-19 Thread Alain Toussaint
<<< Using rlpkg -a -r should work, but only as long as the domain you run in has the privileges to relabel to begin with. Most of the time, if no label is set, it means that the system was once set up without SELinux running and "rlpkg -a -r" hasn't been ran since. My best bet here would be to

RE: [gentoo-hardened] permission problem in /etc

2012-02-19 Thread Alain Toussaint
> What is the output of 'id -Z' johnson ~ # id -Z root:staff_r:staff_t:s0-s0:c0.c1023 Alain

Re: [gentoo-hardened] permission problem in /etc

2012-02-19 Thread Sven Vermeulen
On Sun, Feb 19, 2012 at 04:18:12PM -0500, Alain Toussaint wrote: > While troubleshooting my server in enforcing mode, I have come > across many files and directory in /etc which are not labelled and thus, I > am getting permission denied while using the root account: [...] Using rlpkg -a -r

Re: [gentoo-hardened] permission problem in /etc

2012-02-19 Thread prometheanfire
On Sun, 19 Feb 2012 16:18:12 -0500 "Alain Toussaint" wrote: > which are not labelled and thus, I > am getting permission denied while using the root account: > > johnson ~ # ls -Z /etc/ | grep "(null)" > ls: cannot access /etc/rsyncd.conf: Permission denied What is the output of 'id -Z' -- M

[gentoo-hardened] permission problem in /etc

2012-02-19 Thread Alain Toussaint
Hello, While troubleshooting my server in enforcing mode, I have come across many files and directory in /etc which are not labelled and thus, I am getting permission denied while using the root account: johnson ~ # ls -Z /etc/ | grep "(null)" ls: cannot access /etc/rsyncd.conf: Permission