-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Hi,
FYI:
yesterday a few new updates came in via updates-testing: policycoreutils-2.1.14-46.5.fc19.x86_64 policycoreutils-python-2.1.14-46.5.fc19.x86_64 policycoreutils-sandbox-2.1.14-46.5.fc19.x86_64
Since I installed them sandbox functionality (e.g. "sandbox -X -t sandbox_web_t firefox") stopped working (no window would show up).
Downgrading these packages results in a working setup again:
yum downgrade policycoreutils policycoreutils-python policycoreutils-sandbox
I didn't look into any audit logs but I might be able to do that with my testing VM later.
-------------------------------------------------
VFEmail.net - http://www.vfemail.net $14.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 09/06/2013 07:15 AM, fedorauser wrote:
Hi,
FYI:
yesterday a few new updates came in via updates-testing: policycoreutils-2.1.14-46.5.fc19.x86_64 policycoreutils-python-2.1.14-46.5.fc19.x86_64 policycoreutils-sandbox-2.1.14-46.5.fc19.x86_64
Since I installed them sandbox functionality (e.g. "sandbox -X -t sandbox_web_t firefox") stopped working (no window would show up).
Downgrading these packages results in a working setup again:
yum downgrade policycoreutils policycoreutils-python policycoreutils-sandbox
I didn't look into any audit logs but I might be able to do that with my testing VM later.
That is strange since sandbox was not touched in that update. Can you update a gain and see if it works this time.
Can you check seunshares protection after the update? If after the update it does not work, could you try chmod 4755 /usr/sbin/seunshare and see if it works?
VFEmail.net - http://www.vfemail.net $14.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options! -- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Daniel J Walsh:
That is strange since sandbox was not touched in that update. Can you update a gain and see if it works this time.
Updating broke it again.
Can you check seunshares protection after the update? If after the update it does not work, could you try chmod 4755 /usr/sbin/seunshare and see if it works?
After executing 'chmod 4755 /usr/sbin/seunshare' sandboxes work again.
-------------------------------------------------
VFEmail.net - http://www.vfemail.net $14.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options!
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 09/07/2013 03:33 AM, fedorauser wrote:
Daniel J Walsh:
That is strange since sandbox was not touched in that update. Can you update a gain and see if it works this time.
Updating broke it again.
Can you check seunshares protection after the update? If after the update it does not work, could you try chmod 4755 /usr/sbin/seunshare and see if it works?
After executing 'chmod 4755 /usr/sbin/seunshare' sandboxes work again.
VFEmail.net - http://www.vfemail.net $14.95 ONETIME Lifetime accounts with Privacy Features! 15GB disk! No bandwidth quotas! Commercial and Bulk Mail Options! -- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux
Something in file capabilies is breaking, but I do not know what. I have to do the same thing in F20.
selinux@lists.fedoraproject.org