[gentoo-hardened] SELinux denying sudo

2012-10-26 Thread Stan Sander
Probably something I don't have tweaked just right, but a while ago when I tried to sudo it failed. I built this system at least 6 months ago and followed the procedures that were posted at that time, but then wasn't able to work towards putting SELinux in enforcing mode until this past week. sud

Re: [gentoo-hardened] SELinux denying sudo

2012-10-26 Thread Hinnerk van Bruinehsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 26.10.2012 17:45, Stan Sander wrote: > Probably something I don't have tweaked just right, but a while ago > when I tried to sudo it failed. I built this system at least 6 > months ago and followed the procedures that were posted at that > time, bu

Re: [gentoo-hardened] SELinux denying sudo

2012-10-26 Thread Stan Sander
On 10/26/2012 09:49 AM, Hinnerk van Bruinehsen wrote: > > First question: did you install selinux-sudo and relabel everything > afterwards > > WKR > Hinnerk > Yes. Everything seems up to date in that regard. This is a stable x86 profile. #qlist -Iv selinux-sudo sec-policy/selinux-sudo-2.2012072

Re: [gentoo-hardened] SELinux denying sudo

2012-10-26 Thread Matthew Thode
On 10/26/2012 10:45 AM, Stan Sander wrote: > Probably something I don't have tweaked just right, but a while ago when > I tried to sudo it failed. I built this system at least 6 months ago > and followed the procedures that were posted at that time, but then > wasn't able to work towards putting S

Re: [gentoo-hardened] SELinux denying sudo

2012-10-26 Thread Stan Sander
On 10/26/2012 12:28 PM, Matthew Thode wrote: > > Can you give us the command you were trying to run (for instance 'sudo > -r sysadm_r -t sysadm_t repoman manifest') > > also, 'rlpkg -a -r' just in case (I know you said you did it, but do it > again anyway :D > I have done it again. I was trying t