Új hozzászólás Aktív témák

• #3412 rt06 veterán

  Új Válasz 2011-01-22 15:26:50 #3412

  Új hozzászólás

  Összes hozzászólása itt Válaszok az összes hozzászólására itt Válaszok erre a hozzászólásra

  

  rt06

  veterán

  Hi!

  selinux bajom lenne egy hardened gentoo-n, megpedig az alabbi:

  >>> Emerging (5 of 23) dev-java/commons-pool-1.5.5
  !!! Failed setting exec() context "staff_u:staff_r:portage_fetch_t". * commons-pool-1.5.5-src.tar.gz RMD160 SHA1 SHA256 size ;-) ... [ ok ]
  * Package: dev-java/commons-pool-1.5.5
  * Repository: gentoo
  * Maintainer: java@gentoo.org
  * USE: elibc_glibc kernel_linux selinux userland_GNU x86
  * Using: sun-jdk-1.6
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".>>> Unpacking source...
  >>> Unpacking commons-pool-1.5.5-src.tar.gz to /var/tmp/portage/dev-java/commons-pool-1.5.5/work
  >>> Source unpacked in /var/tmp/portage/dev-java/commons-pool-1.5.5/work
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".>>> Preparing source in /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src ...
  >>> Source prepared.
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".>>> Configuring source in /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src ...
  Rewriting attributes
  Rewriting ./build.xml
  >>> Source configured.
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".>>> Compiling source in /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src ...
  * Disabling all optional ANT_TASKS
  Buildfile: /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src/build.xml
  
  init:
  
  compile:
  [mkdir] Created dir: /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src/build/classes
  [javac] Compiling 22 source files to /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src/build/classes
  
  build-jar:
  [mkdir] Created dir: /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src/dist
  [jar] Building jar: /var/tmp/portage/dev-java/commons-pool-1.5.5/work/commons-pool-1.5.5-src/dist/commons-pool.jar
  
  BUILD SUCCESSFUL
  Total time: 10 seconds
  >>> Source compiled.
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".>>> Test phase [not enabled]: dev-java/commons-pool-1.5.5
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".
  >>> Install commons-pool-1.5.5 into /var/tmp/portage/dev-java/commons-pool-1.5.5/image/ category dev-java
  >>> Completed installing commons-pool-1.5.5 into /var/tmp/portage/dev-java/commons-pool-1.5.5/image/
  
  
  >>> Installing (5 of 23) dev-java/commons-pool-1.5.5
  * checking 4 files for package collisions
  >>> Setting SELinux security labels
  filespec_eval: hash table stats: 11 elements, 11/65536 buckets used, longest chain length 1
  --- /usr/
  --- /usr/share/
  >>> /usr/share/commons-pool/
  >>> /usr/share/commons-pool/package.env
  >>> /usr/share/commons-pool/lib/
  >>> /usr/share/commons-pool/lib/commons-pool.jar
  --- /usr/share/doc/
  >>> /usr/share/doc/commons-pool-1.5.5/
  >>> /usr/share/doc/commons-pool-1.5.5/README.txt.bz2
  >>> /usr/share/doc/commons-pool-1.5.5/RELEASE-NOTES.txt.bz2

  igy nez ki nalam nagyjabol barmilyen csomag telepitese, legalabbis azt tekintve, hogy midnen estben megvannak az alabbi sorok:

  !!! Failed setting exec() context "staff_u:staff_r:portage_fetch_t"
  !!! Failed setting exec() context "staff_u:staff_r:portage_sandbox_t".

  a felhasznalom a staff_u selinux user, mely beletartozik a staff_r es sysadm_r csoportba
  ~ # semanage user -l
  SELinux User SELinux Roles
  
  root staff_r sysadm_r
  staff_u staff_r sysadm_r
  sysadm_u sysadm_r
  system_u system_r
  unconfined_u unconfined_r
  user_u user_r
  
  ~ # semanage login -l
  
  Login Name SELinux User
  
  __default__ user_u
  cyla staff_u
  root root
  system_u system_u

  megoldaskent ugy tunik mukodik, hogyha az emerge elott kiadok egy newrole -r sysadm_r parancsot, viszont mivel amugy is resze vagyok ezen csoportnak, nem ertem, miert szukseges kulon atvaltani arra

  ez lenne a normalis mukodes, vagy (szokas szerint) en rontok el valamit?

  valaszaitokat elore is koszonom

  Udv: VladimirR

Új hozzászólás Aktív témák