On 09/18/2017 11:24 AM, Frédéric Bron wrote:
> Hi,
> 
> I created a new user using kuser.
> I wanted to change his password with passwd user :
> $ su
> $ passwd user
> 
> I got the following error:
> passwd: Erreur de manipulation du jeton d'authentification
> 
> Then I did:
> $ setenforce 0
> and it worked.
> 
> Later, I reenabled selinux:
> $ setenfoce 1
> 
> and the user tried to login with sddm to Plasma -> got a black screen
> then back to sddm.
> 
> removed selinux:
> $ setenforce 0
> 
> Login to Plasma worked
> 
> What's wrong with SELinux?

I mistakenly replied directly to Frederic, not the list. Whoops!
Anyway, this is what I said so there's a record:

"Probably nothing. You need to relabel your files as you've likely done
things with SELinux disabled. If so, the things that were done with it
disabled have the wrong SELinux contexts.

"As the root user, "touch /.autorelabel", then enable SELinux and
reboot. The reboot will take a while as the system walks all the
filesystems and relabels files and directories with the correct
contexts.

"Don't just enable and disable SELinux willy-nilly. If you have it
enabled and something doesn't work, use the AVC mechanisms to find out
WHY it didn't work. It may be an SELinux policy that's wrong or it may
be that some processes/programs are not adhering to SELinux properly
(for example, ZoneMinder has LOTS of SELinux violations)."

----------------------------------------------------------------------
- Rick Stevens, Systems Engineer, AllDigital    ri...@alldigital.com -
- AIM/Skype: therps2        ICQ: 226437340           Yahoo: origrps2 -
-                                                                    -
-         The world is coming to an end ... SAVE YOUR FILES!!!       -
----------------------------------------------------------------------
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org

Reply via email to