-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 12/06/2010 09:45 AM, Jerry Franz wrote:
On 12/06/2010 06:06 AM, Daniel J Walsh wrote:
Did you take a look at the AVC messages? Are you running setroubleshoot?
Yes to both.
Usually running something like restorecon -R -v /var/ftp would have cleaned this up, if it is a simple mislabel in /var directory.
The point is *I shouldn't have to*. A stable system should not have breakages from SELinux where 'for some reason' a directory tree got mislabeled during updates. And yet it does. I enable SELinux on only a handful of my systems - and most of those systems acquire SELinux related problems at least once ever year or two just from normal updates.
While SELinux continues to do stuff like this, it will remain disabled on the vast majority of my (and many other people's) systems.
I agree, and would like to look at the AVC's to understand what could have broken the labeling.