two selinux config files in Fedora 18

asked 2013-01-18 00:04:08 -0600

Mohan G
315 ●23 ●36 ●43

updated 2014-09-28 11:44:29 -0600

mether
7061 ●43 ●67 ●111 https://fedoraproject....

Hi, In my fresh fedora-18 installation, there are two different selinux config files: /etc/selinux/config and /etc/sysconfig/selinux. I normally disable selinux in /etc/sysconfig/selinux and it use to work till F-16, since /etc/sysconfig/selinux is a soft link to /etc/selinux/config. But, in F-18 they are two different files and my changes to /etc/sysconfig/selinux are not reflecting in selinux status. Only changes in /etc/sysconfig/selinux are reflecting in selinux status.

Is this a bug ?

-Mohan

edit retag flag offensive close merge delete

Comments

I'm curious - why are you disabling SELinux?

randomuser ( 2013-01-22 14:00:56 -0600 )edit

2

Disabling it entirely is a really big hammer where a screwdriver would do. Pipe the relevant reports in /var/log/audit/audit.log to audit2why and it'll probably tell you what boolean needs to be switched to allow the desired behavior, or the context to be applied, etc. Changing the policy to allow only the desired activity is just as simple as disabling it entirely, once you know how.

randomuser ( 2013-02-04 02:27:27 -0600 )edit

add a comment

1

answered 2013-01-18 03:49:05 -0600

domg472
544 ●6 ●6 ●11

/etc/sysconfig/selinux should be a softlink to /etc/selinux/config:

# cat /etc/fedora-release
Fedora release 18 (Spherical Cow)
# ls -alZ /etc/sysconfig/selinux
lrwxrwxrwx. root root system_u:object_r:etc_t:s0       /etc/sysconfig/selinux -> ../selinux/config