@adam-ierymenko said in Zerotier failing to start after upgrade:

Do an update. We released new binary builds for Linux that should address this.

Sorry for resurrecting an old thread, but new installs are having the same selinux issue. Took some digging for me to figure out what was going on. Multiple attempts to install on Fedora 33.

@black3dynamite said in Cannot boot to LUKS encrypted drive on Ubuntu - freezes after unlocking drive:

@travisdh1 Is it possible that AppArmor installed by default on all ubuntu installation? Having AppArmor and SELinux both active can cause problems.

I'd love to hear a bit more about apparmor. I am not familiar with it at all. This should be a new thread.

@JaredBusch said in Error - SELinux is Preventing Vmtoolsd From Entrypoint Access On the File /usr/bin/bash:

@wrx7m said in Error - SELinux is Preventing Vmtoolsd From Entrypoint Access On the File /usr/bin/bash:

My question - Is this permanent?

Yes

Thanks!

@Donahue said in What is the right way to install snap on Fedora:

@JaredBusch will you be willing to write up a guide for getting open office working with NC, specifically behind nginx? I can try and fumble through it, but you make things look so easy.

@romo and I have that working. That's how ours works. Romo had to modify the Docker instance because the instance itself is misconfigured for doing this.

@dustinb3403 said in CentOS 7 Telnet Port Change:

Cockpit isn't included in CentOS 7 by default (is it?. . . .)

Not with a minimal install. With the problem you are having, I was assuming the issue was with port 9090.

@jaredbusch said in Pi-hole on Fedora has issues with SELinux:

https://mangolassi.it/topic/17834/pi-hole-web-interface-not-working/15

That worked.

This behavior is different than the last time I setup a reverse proxy like this. But that was also on CentOS 7 and not Fedora. So policy could be different.

Is there anything new with updating the script? 🙂

@brrabill said in SELinux issue with MongoDB on Fedora 27:

@jaredbusch said in SELinux issue with MongoDB on Fedora 27:

@black3dynamite said in SELinux issue with MongoDB on Fedora 27:

Have not see that issue but I'm also using mongodb that is available from Fedora instead.
/var/lib/mongo/ doesn't exist for me. But /var/lib/mongodb does exist. I also do have local.ns too.

/sigh

FFS @jaredbusch pay attention to what you are doing. don't use old versions.

Long day when you have to sigh and FFS at yourself.

Something like that, yes.

@jaredbusch said in HAProxy not workign with SELinux enforcing:

Apparently i never setup this server to auto update...

Ayup.....

[[email protected] ~]# dnf -y update Last metadata expiration check: 0:08:45 ago on Mon 27 Nov 2017 06:44:36 PM CST. Dependencies resolved. ================================================================================================================================== Package Arch Version Repository Size ================================================================================================================================== <snip> Upgrading: selinux-policy noarch 3.13.1-260.14.fc26 updates 508 k selinux-policy-targeted noarch 3.13.1-260.14.fc26 updates 9.4 M <snip> Transaction Summary ================================================================================================================================== Install 3 Packages Upgrade 43 Packages Remove 3 Packages

@JaredBusch said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

@EddieJennings said in SELinux with KVM?:

@NerdyDad said in SELinux with KVM?:

Would you deploy ClamAV on the host of KVM?
Would you deploy SELinux on the host of KVM?

What little I've learned of SELinux, I thought it was something baked into CentOS. At least it seems to be for me.

It is but needs to be setup.

Umm, no. SELinux is installed and working by default. The only setup you do is for things that need more permissions than SELinux provides by default.

Right. SELinux is installed by default. Some tools aren't (like policycoreutils). Svirt by default handles MLS labels for KVM guests. You shouldnt have to do any work to get all of that functionality.

@scottalanmiller said in Bacula and selinux...:

@syko24 said in Bacula and selinux...:

@DustinB3403

Again I didn't get too far with it but they appear to have their own web ui.

https://www.bareos.org/en/bareos-webui.html

Maybe a thread looking at that product would make sense. I don't know it but am interested to see what they are bringing to the table that make forking Bacula make sense.

I agree, and I'll start another one after lunch once I get the basic platform setup. Gotta love a good base image.

@NerdyDad said in Proposed Session: SELinux Deep Dive:

I'm resurrecting this topic for suggestion to discussion for the DFW Mango Meetup.

Oh nice.

fantastic.. I was thinking I needed something like this the other day then I .... Squirrel ...

Youtube Video

They sent this update

To further clarify as I believe the meaning may have been lost in my phrasing (I apologize), the error you're receiving on boot indicates that SELinux was for some reason disable improperly (ie. not with the config files -- If the kernel looks for SELinux but it is gone, it will cause kernel or init halts, or even full-blown kernel panics.

Not sure how it would get disabled or changed without using the config files?

@scottalanmiller oops...