Can't make SELinux context types permanent with semanage

Posted by Safado on Server Fault See other posts from Server Fault or by Safado
Published on 2013-11-08T17:39:27Z Indexed on 2013/11/09 4:00 UTC
Read the original article Hit count: 479

Filed under:

rhel6

|

selinux

I created a new folder at /modevasive to hold my mod_evasive scripts and for the Log Directory. I'm trying to change the context type to httpd_sys_content_t so Apache can write to the folder. I did semanage fcontext -a -t "httpd_sys_content_t" /modevasive to change the context and then restorecon -v /modevasive to enable the change, but restorecon didn't do anything. So I used chcon to change it manually, did the restorecon to see what would happen and it changed it back to default_t.

semanage fcontext -l gives:

/modevasive/          all files          system_u:object_r:httpd_sys_content_t:s0`

And looking at /etc/selinux/targeted/contexts/files/file_contexts.local gives

 /modevasive/    system_u:object_r:httpd_sys_content_t:s0

So why does restorecon keep setting it back to default_t?

© Server Fault or respective owner

Related posts about rhel6

LUKS with LVM, mount is not persistent after reboot

as seen on Server Fault - Search for 'Server Fault'
I have created a Logical vol and used luks to encrypt it. But while rebooting the server. I get a error message (below), therefore I would have to enter the root pass and disable the /etc/fstab entry. So mount of the LUKS partition is not persistent during reboot using LUKS. I have this setup on RHEL6… >>> More
Account Lockout with pam_tally2 in RHEL6

as seen on Server Fault - Search for 'Server Fault'
I am using pam_tally2 to lockout accounts after 3 failed logins per policy, however, the connecting user does not receive the error indicating pam_tally2's action. (Via SSH.) I expect to see on the 4th attempt: Account locked due to 3 failed logins No combination of required or requisite or the… >>> More
How to configure wpa_supplicant on RHEL6?

as seen on Server Fault - Search for 'Server Fault'
I am running a version of RHCE6 on my laptop. I uninstalled the default NetworkManager in order that I could configure the network all in the command line. The Ethernet part is okay, but I have problem bringing up the wireless interface. What I got is: Bringing up interface wlan0: Determining… >>> More
Setting up quotas on 64-bit RHEL6 OS with ext4 filesystem

as seen on Server Fault - Search for 'Server Fault'
Setting up a new 64 bit RHEL 6 server with ext4 FS. Have only worked with ext3 and 32bit RHEL5 before. No matter what I try, I cannot get it to work. Current settings for mount (from "mount" command): /dev/sda7 on / type ext4 (rw,noatime) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts… >>> More
Linux Scheduler (not using all cores on multi-core machine) RHEL6

as seen on Server Fault - Search for 'Server Fault'
I'm seeing strange behavior on one of my servers (running RHEL 6). There seems to be something wrong with the scheduler. Here's the test program I'm using: #include <stdio.h> #include <unistd.h> #include <stdlib.h> void RunClient(int i) { printf("Starting client %d\n", i); … >>> More

Related posts about selinux

AD GIT SELinux RHEL 6 : Can not get SELinux to allow connetion to git

as seen on Server Fault - Search for 'Server Fault'
I have a problem with SELinux! I have installed git on Red Hat Enterprise 6 with AD group control and SSL Cert . Everything works fine if I do setenforce 0 ( set SELinux in detection only mode ) or if I do semanage permissive -a httpd_t (Set httpd_t in detection only mode) I do not want to use… >>> More
How do I enable SELinux when booting a ramdisk from a CD/DVD?

as seen on Server Fault - Search for 'Server Fault'
I have a bootable DVD which boots the same Kernel as the Hard Drive (which uses SELinux). I have copied /etc/selinux and all kernel modules to my ramdisk, and have tried various combinations of selinux=1 and selinux 1 with enforcing 1 and enforcing 0. as Kernel boot parameters. All files contained… >>> More
How do I enable SELinux when booting from a CD/DVD?

as seen on Server Fault - Search for 'Server Fault'
I have a bootable DVD which boots the same Kernel as the Hard Drive (which uses SELinux). I have copied /etc/selinux and all the kernel modules to my ramdisk, and have tried both selinux=1 and selinux 1 as Kernel boot parameters. After the system boots, I check dmesg: % dmesg | grep -i selinux Kernel… >>> More
How does SELinux affect the /home directory?

as seen on Server Fault - Search for 'Server Fault'
Hi everyone. I'm migrating a CentOS 5.3 system from MySQL to PostgreSQL. The way our machine is set up is that the biggest disk partition is mounted to /home. This is out of my control and is managed by the hosting provider. Anyway, we obviously want the database files to be on /home for this… >>> More
Question regarding the SELinux type enforcement file

as seen on Server Fault - Search for 'Server Fault'
In my SElinux te file, I define two new types called voice_t and data_t which certain directories will be classified in the fc file (/data/ will be of type data_t and /voice/ will be of type voice_t). I would like the one SELinux policy to be used for all servers in my network, but, some servers… >>> More