SELinux Problems (Was: [CentOS] Forum Decorum: a reminder seems appropriate.)

Craig White craigwhite at azapple.com
Thu Mar 30 03:46:15 UTC 2006


On Thu, 2006-03-30 at 00:21 -0300, Rodrigo Barbosa wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> 
> On Wed, Mar 29, 2006 at 07:06:23PM -0700, Craig White wrote:
> > SELinux has not been a problem for me on CentOS 4, RHEL 4 or FC-3 or
> > FC-4. There have been some changes with respect to SELinux in FC-5
> > including new tools and new policies and I haven't grappled with them
> > yet but so far, SELinux hasn't created any obstacles that weren't
> > relatively easy to solve, and yes, there were times I needed some help.
> 
> So, here is a interesting one for you :)
> 
> In one of my CentOS machines (originally installed with 4.0, not 4.3),
> several of my files lost their selinux context information. Several
> others are with wrong values.
> 
> Is there a way to restore the original selinux context on these files ?
> Maybe using RPM (even tho I don't think the value is stored on the
> RPM database, I'm not sure).
> 
> Of course, reinstalling the machine is always an option, but since it
> is located on a datacenter (on another country), that might be a
> bit of a PITA.
> 
> TIA,
> 
> PS.: Another one for the "Good Thing(TM)": Never hijack threads. If you
> want to use the content of one e-mail to start a new thread, always
> remove the "In-Reply-To:" header line. :)
----
fixfiles --help

fixfiles -R bind check
fixfiles -R bind restore

where the settings are likely stored...
ls -l /etc/selinux/targeted/contexts
ls -l /etc/selinux/targeted/policy
...

Craig




More information about the CentOS mailing list