Bug 120222 - SELinux FAQ - how do you execute applications installed into e.g. /opt or /usr/local ?
Summary: SELinux FAQ - how do you execute applications installed into e.g. /opt or /us...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora Documentation
Classification: Fedora
Component: selinux-faq
Version: devel
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Karsten Wade
QA Contact: Tammy Fox
URL: http://people.redhat.com/kwade/fedora...
Whiteboard:
Depends On:
Blocks: 118757
TreeView+ depends on / blocked
 
Reported: 2004-04-06 22:27 UTC by Karsten Wade
Modified: 2007-04-18 17:05 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2005-01-04 14:26:49 UTC
Embargoed:


Attachments (Terms of Use)

Description Karsten Wade 2004-04-06 22:27:08 UTC
Description of change/FAQ addition"

Basically I installed a piece of third part software in the /opt, 
/usr/local ... directory

When a user goes to execute the file he gets permission denied even 
though the protection is 755.

He will need to change the security context to a executable context. 

chmod -t bin_t /FULLPATH

Also they should add an entry to the 
/etc/security/selinux/src/policy/file_contexts/misc/ directory
that specifies the security context so a relabel will maintain the 
security context.



Version-Release of FAQ 

selinux-faq-1.0-4 (2004-04-05-T04:20-0800)

Comment 1 Karsten Wade 2004-04-06 22:32:00 UTC
Two questions:

1. Should that be "chcon -t bin_t /FULLPATH"?

2. As a procedure, is this accurate:

   1. Install software
   2. chcon -t bin_t /path-to-executable
   3. add entry to
/etc/security/selinux/src/policy/file_contexts/misc/ specifying the
security contex
   4. run fixfiles /what/path?

Comment 2 Daniel Walsh 2005-01-03 21:16:03 UTC
Is this bug still a problem?  

Comment 3 Karsten Wade 2005-01-04 00:26:09 UTC
This is from a pretty early version of the FAQ, making it probably a
FC 2 test 2 report, iirc that was before the strict/targeted split. 
But I haven't gone in to test, having lost the original context this
bug came from.

If you think it's resolved, I'm all for closing.

Comment 4 Daniel Walsh 2005-01-04 14:26:49 UTC
This really does not apply to FC3.  So I am closing.  We have enough
other problems in the FAQ.

Dan


Note You need to log in before you can comment on or make changes to this bug.