Discuss May 2017

discuss@lists.centos.org

112 participants
94 discussions

OT: Firefox lockdown policies for CentOS7 desktops
by C. L. Martinez 02 May '17

02 May '17

Hi all, I am doing some tests with my CentOS7 desktop. I have configured a policy to lockdown Chrome/Chromium browsers and it works perfectly. And I am trying to the same for Firefox browsers but Firefox's docs are really "hard" to understand. I have the following stopper points: a/ what is the "real" system wide's config file: firefox.js, sysprefs.js or local-settings.js/mozilla.cfg ? b/ And what is the real directory: "/etc/firefox", "/usr/lib/firefox/defaults/pref" or which?? c/ Is it possible to download and install addons using system wide's policy? For example with Chrome/Chromium you can use "ExtensionInstallForcelist" option. d/ Where can I found all the options :)? Many thanks -- Greetings, C. L. Martinez

2 1

Samba active domain controller guide for Centos 7
by Robert Moskowitz 02 May '17

02 May '17

Is there a good guide for setting up a Samba active domain controller? I am currently running ClearOS, but it does more than what I want, even that I had to modify to suit my needs. Only a few systems. Currently still XP, but I will migrate to Win7 with this move. Of course I will be doing the install on a Cubietruck armv7. thanks for any pointers.

2 1

GCC Installation/Repositories
by Sajjad Hussain 02 May '17

02 May '17

Dear All, We need CentOS 5 for a software, and installed CentOS 5.4. But when we try to install Developments Tools like gcc it gives error that repositories are not found. Can you please help us in install gcc on CentOS 5.4? -bash-3.2$ cat /etc/redhat-release CentOS release 5.4 (Final) -bash-3.2$ uname -a Linux i80pc57 2.6.18-164.el5PAE #1 SMP Thu Sep 3 04:10:44 EDT 2009 i686 i686 i386 GNU/Linux Thanks and Best Regards -- Sajjad Hussain

2 1

selinux problem policies
by Günther J. Niederwimmer 01 May '17

01 May '17

Hello, My problem is to add selinux policies can any help to say what is wrong with my policies I write this! semanage fcontext -a -t httpd_sys_rw_content_t "/var/www/html(/.*)?/ typo3conf(/.*)?" I have more instances from typo3 I found this construct in the selinux policies "/var/www/html(/.*)?/uploads(/.*)?" but my is not working ? and I have only errors? neverallow check failed at /etc/selinux/targeted/tmp/modules/100/selinuxutil/ cil:244 (neverallow selinuxutil_typeattr_1 semanage_store_t (file (relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/selinuxutil/cil:675 (allow restorecond_t non_auth_file_type (file (getattr relabelfrom relabelto))) <root> allow at /etc/selinux/targeted/tmp/modules/100/systemd/cil:1108 (allow systemd_tmpfiles_t non_auth_file_type (file (getattr relabelfrom relabelto))) neverallow check failed at /etc/selinux/targeted/tmp/modules/100/base/cil: 13121 (neverallow base_typeattr_18 scsi_generic_device_t (blk_file (read))) <root> allow at /etc/selinux/targeted/tmp/modules/100/munin/cil:581 (allow disk_munin_plugin_t device_node (blk_file (ioctl read getattr lock open))) ......... or is a other way to include policies better ? -- mit freundlichen Grüssen / best regards Günther J. Niederwimmer

3 5

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss May 2017