Questions tagged [selinux]

NSA Security-Enhanced Linux (SELinux) is an implementation of a flexible mandatory access control architecture in the Linux operating system.

Security-Enhanced Linux (selinux) is a National Security Agency research project to modify the Linux kernel with enhanced security-related functions, including mandatory access control. This tag is also appropriate for questions about SEAndroid, NSA's adaptation of SELinux to the Android platform.

675 questions
14
votes
3 answers

Unknown/unsupported storage engine: InnoDB

I'm setting up a replication server and when I try to start the mysql service for the first time, it fails: [root@ravioli mysql]# service mysqld start MySQL Daemon failed to start. Starting mysqld: …
a coder
  • 7,530
  • 20
  • 84
  • 131
13
votes
5 answers

set_metadata_recursive failing on Android install

I'm trying to bring up a 4.4 android build for my droid razr HD. It compiles cleanly, but when I try to install it fails with the following error in the recovery log: ApplyParsedPerms: removexattr of /system/xbin/zipalign to 0 failed: Operation…
user2969066
  • 131
  • 1
  • 1
  • 5
13
votes
5 answers

file_put_contents not creating txt file

I currently have a php script that is running when a browser browser browses to the webpage. What I'm trying to do is write a text file when the script runs that stores a variable. The owner of the folder is apache, but everyone has read write,…
choppyfireballs
  • 179
  • 1
  • 2
  • 9
13
votes
2 answers

PHP unable to create a directory with mkdir

I have a previously working PHP script that is able to create a directory with mkdir: $webfolder = "/var/www/html/images/user"; mkdir($webfolder, 0770); I made some changes to the permission setting of the folder /var/www/html/images which is…
Question Overflow
  • 10,925
  • 18
  • 72
  • 110
13
votes
2 answers

SVN hook pre-revprop-change not working

I know that this has been asked many times before, but I believe my situation is different. I am trying to add a pre-revprop-change hook to our SVN repository to enable changes to be made to log messages. Before I added the pre-revprop-change file I…
Lee Netherton
  • 21,347
  • 12
  • 68
  • 102
12
votes
4 answers

RedHat 6/Oracle Linux 6 is not allowing key authentication via ssh

Keys are properly deployed in ~/.ssh/authorized_keys Yet ssh keeps on prompting for a password.
Olivier Refalo
  • 50,287
  • 22
  • 91
  • 122
10
votes
3 answers

PostgreSQL 11 configurations doesn't allow pgAdmin4 to connect

I'm pretty new to PostgreSQL so the question may be simple. So. I have installed PostgreSQL 11 and pgAdmin 4 on Fedora 29. I can connect to the database via terminal or AzureDataStudio, but when I try to connect with pgAdmin, I get this…
amiry jd
  • 27,021
  • 30
  • 116
  • 215
10
votes
1 answer

My custom selinux policies seem to be ignored by android system

I have some trouble on getting custom selinux policies running properly on an AOSP based Android 7.1.2 (more precisely based on sony open devices tree). My problem is that the audit logs keep telling me about missing file access rules that I…
nexus
  • 236
  • 2
  • 10
10
votes
1 answer

Connect DATABASE Error TYPE: 2002: Permission denied

I am trying to connect the database with the following script(cxn-test.php)
Sundar
  • 4,580
  • 6
  • 35
  • 61
10
votes
1 answer

incrond running but not executing command under CentOS 6.4

I have installed incron from the EPEL repository (before you ask; YES, I also tried downloading the source and compiling locally; same results) and am attempting to set up a process on my CentOS 6.4 (final) virtual box that I have successfully…
JawzX
  • 293
  • 1
  • 2
  • 15
9
votes
3 answers

SElinux Android message interpretation

I am unable to make sense of this message which I get on my android application. Any experts in the house ? type=1400 audit(0.0:2233): avc: denied { create } for name="access_control.new_commit.cv" scontext=u:r:untrusted_app:s0:c512,c768…
Jay
  • 325
  • 2
  • 9
9
votes
3 answers

Where are all the shared libraries stored on android?

Where are all the shared libraries (.so) stored on Android? I was able to find the /system/lib directory but I'm sure there are more. Not being able to use the find command doesn't help either.
shaveenk
  • 1,983
  • 7
  • 25
  • 37
9
votes
4 answers

SELinux policy definition for Android system service: how to setup?

I had earlier written a standalone daemon to access a custom device (/dev/mydev0). Looking at AOSP source, I figured I needed setup policies in following files to make it work: new file device.te containing: type mydev_device, dev_type; new file…
GPS
  • 1,322
  • 1
  • 18
  • 40
9
votes
3 answers

How to completely disable SELinux in Android L in the init.rc file?

I want to disable SELinux at boot time for Android L or 5. The reason is because my daemon is not begin executed on boot when it should due to SELinux problems. I have the following in my init.rc file: su 0 setenforce 0 service my_daemon…
9
votes
1 answer

SELinux rules for i2c files in sysfs in Android

I created kernel driver as loadable module for one of my I2C devices. The driver creates few sysfs file under I2C corresponding folder (/sys/devices/i2c/i2c-0/0-0008/) using instantiation through new_device file…
DmitryF.
  • 91
  • 1
  • 4
1
2
3
44 45