Find the answer to your Linux question:
Results 1 to 6 of 6
Hello I have MLS on Fedora 12 but I can not run "newrole", for example: Code: newrole -r sysadm_r I get error: Code: Sorry, newrole may be used only on ...
  1. 01-27-2010 #1
    mlyczko
    mlyczko is offline
    Just Joined!
    Join Date
    Jan 2010
    Posts
    7

    Mls Newrole

    Hello

    I have MLS on Fedora 12 but I can not run "newrole", for example:

    Code:
    newrole -r sysadm_r
    I get error:

    Code:
    Sorry, newrole may be used only on a SELinux kernel.
    What can be wrong?
    PS. Sorry for my english.
    Reply With Quote Reply With Quote
  2. 01-27-2010 #2
    Rubberman
    Rubberman is offline
    Linux Guru Rubberman's Avatar
    Join Date
    Apr 2009
    Location
    I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
    Posts
    8,974
    Apparently do are not running Fedora in Security Enhanced mode (SELinux). This tool only works for an SELinux-enabled kernel.
    Sometimes, real fast is almost as good as real time.
    Just remember, Semper Gumbi - always be flexible!
    Reply With Quote Reply With Quote
  3. 01-27-2010 #3
    mlyczko
    mlyczko is offline
    Just Joined!
    Join Date
    Jan 2010
    Posts
    7
    This is my /etc/selinux/config:

    Code:
    # This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#    enforcing - SELinux security policy is enforced.
#    permissive - SELinux prints warnings instead of enforcing.
#    disabled - SELinux is fully disabled.
SELINUX=enforcing
# SELINUXTYPE= type of policy in use. Possible values are:
#    targeted - Only targeted network daemons are protected.
#    strict - Full SELinux protection.
SELINUXTYPE=mls
    Reply With Quote Reply With Quote
  4. 01-27-2010 #4
    Rubberman
    Rubberman is offline
    Linux Guru Rubberman's Avatar
    Join Date
    Apr 2009
    Location
    I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
    Posts
    8,974
    Just because you have an SELinux configuration on your system, doesn't mean that it's running. What is the output from uname -a?
    Sometimes, real fast is almost as good as real time.
    Just remember, Semper Gumbi - always be flexible!
    Reply With Quote Reply With Quote
  5. 01-28-2010 #5
    mlyczko
    mlyczko is offline
    Just Joined!
    Join Date
    Jan 2010
    Posts
    7
    I get:
    Code:
    Linux localhost.localdomain 2.6.31.5-127.fc12.i686 #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686 i386 GNU/Linux
    Reply With Quote Reply With Quote
  6. 01-28-2010 #6
    Rubberman
    Rubberman is offline
    Linux Guru Rubberman's Avatar
    Join Date
    Apr 2009
    Location
    I can be found either 40 miles west of Chicago, or in a galaxy far, far away.
    Posts
    8,974
    I don't think you have the SELinux sub-system enabled. Go to the Service Management (Services) tool in your Administration menu (or sub-menu thereof) and see if it is enabled. If not, you need to configure and enable it.
    Sometimes, real fast is almost as good as real time.
    Just remember, Semper Gumbi - always be flexible!
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules

...