Results 1 to 2 of 2
- 07-20-2009, 10:21 PM #1
Newbie
- Join Date
- Jul 2009
- Posts
- 16
How to install Fedora and Radius
Problem Scenario:
I installed Fedora and radius.
After that when i give the command ./radiusd start the following error text appears with
failed message. Its actually issue of labelling
Would any body give clue to resolve the issue:
Summary:
SELinux is preventing the restorecon from using potentially mislabeled files
(/var/tmp/kdecache- root/kpc/ kde-icon- cache.index) .
Detailed Description:
SELinux has denied restorecon access to potentially mislabeled file(s)
(/var/tmp/kdecache- root/kpc/ kde-icon- cache.index) . This means that SELinux will
not allow restorecon to use these files. It is common for users to edit files in
their home directory or tmp directories and then move (mv) them to system
directories. The problem is that the files end up with the wrong file context
which confined applications are not allowed to access.
Allowing Access:
If you want restorecon to access this files, you need to relabel them using
restorecon -v ‘/var/tmp/kdecache- root/kpc/ kde-icon- cache.index’ . You might want
to relabel the entire directory using restorecon -R -v
‘/var/tmp/kdecache- root/kpc’ .
Additional Information:
Source Context unconfined_u: unconfined_ r:setfiles_ t:s0-s0:c0. c102
3
Target Context unconfined_u: object_r: user_tmp_ t:s0
Target Objects /var/tmp/kdecache- root/kpc/ kde-icon- cache.index [
file ]
Source restorecon
Source Path /sbin/setfiles
Port
Host localhost.localdoma in
Source RPM Packages policycoreutils- 2.0.46-5. fc9
Target RPM Packages
Policy RPM selinux-policy- 3.3.1-42. fc9
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name home_tmp_bad_ labels
Host Name localhost.localdoma in
Platform Linux localhost.localdoma in 2.6.25-14.fc9. i686 #1
SMP Thu May 1 06:28:41 EDT 2008 i686 i686
Alert Count 13
First Seen Thu 05 Feb 2009 06:14:34 PM GST
Last Seen Sat 07 Feb 2009 06:10:16 PM GST
Local ID f0278f05-071c- 475e-b021- 3867898a0ea8
Line Numbers
Raw Audit Messages
host=localhost. localdomain type=AVC msg=audit(123401581 6.985:21) : avc: denied {
read write } for pid=2631 comm=”restorecon” path=”/var/tmp/ kdecache- root/kpc/ kde-
icon-cache.index” dev=sda5 ino=622596
scontext=unconfined _u : unconfined_ r:setfiles_ t:s0-s0:c0. c1023
tcontext=unconfined _u : bject_ r:user_tmp_ t:s0 tclass=file
host=localhost. localdomain type=AVC msg=audit(123401581 6.985:21) : avc: denied {
read write } for pid=2631 comm=”restorecon” path=”/var/tmp/ kdecache- root/kpc/ kde-
icon-cache.data” dev=sda5 ino=622597
scontext=unconfined _u:unconfined_ r:setfiles_ t:s0-s0:c0. c1023
tcontext=unconfined _u : bject_ r:user_tmp_ t:s0 tclass=file
host=localhost. localdomain type=SYSCALL msg=audit(123401581 6.985:21) :
arch=40000003 syscall=11 success=yes exit=0 a0=8fb90b8 a1=8fd0e90 a2=8fb9558
a3=0 items=0 ppid=2534 pid=2631 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=pts1 ses=1 comm=”restorecon” exe=”/sbin/setfiles ”
subj=unconfined_ u:unconfined_ r:setfiles_ t:s0-s0:c0. c1023 key=(null)
Solution:
According to the your scenario, you are facing
problem of SElinux Labeling if you are not using SELinux then you can
use this command
setenforce 0
If you are not using SELinux then this command will resolve you issue
That's all cheers
Last edited by Asif; 07-20-2009 at 10:30 PM.
- 09-17-2010, 03:40 AM #2
Newbie
- Join Date
- Sep 2010
- Location
- Pima, AZ
- Posts
- 1
Thanks for sharing. I had encountered problems which I think something similar with that. Because it seems complicated I decided to call an I.T. personnel to fixed it and of course had paid him. How I wish I had done it by myself...



LinkBack URL
About LinkBacks




Reply With Quote







Bookmarks