The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SELinux errors

Discussion in 'General Discussion' started by drkm, Feb 7, 2009.

  1. drkm

    drkm Member

    Joined:
    Jan 21, 2009
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    I'm getting strange messages in my /var/log/messages.

    Is this anything to worry about?

    How do I stop/fix these?

    Feb 7 14:01:03 app setroubleshoot: SELinux is preventing exim (system_mail_t) "read" to ./Hulk.pm (usr_t). For complete SELinux messages. run sealert -l 50947260-5e38-4889-ba1a-e57f2bd95f49
    Feb 7 14:01:03 app setroubleshoot: SELinux is preventing exim (system_mail_t) "read" to ./shadow (shadow_t). For complete SELinux messages. run sealert -l 35f60a2c-251c-4b23-9080-ee056282ce79
    Feb 7 14:01:04 app setroubleshoot: SELinux is preventing exim (system_mail_t) "getattr" to /etc/shadow (shadow_t). For complete SELinux messages. run sealert -l f47a6a7a-c688-4a6b-b289-988fed5a3a67
    Feb 7 14:01:04 app setroubleshoot: SELinux is preventing exim (system_mail_t) "unlink" to ./1LVnjx-0002v2-RC-H (var_spool_t). For complete SELinux messages. run sealert -l a66b4a0c-85de-4834-93f6-a5e47a847cb7
     
  2. rhenderson

    rhenderson Well-Known Member

    Joined:
    Apr 21, 2005
    Messages:
    785
    Likes Received:
    0
    Trophy Points:
    16
    Location:
    Oklahoma
    cPanel Access Level:
    Root Administrator
    Try setenforce 0 from shell to disbale selinux
     
  3. Voltar

    Voltar Well-Known Member

    Joined:
    Apr 30, 2007
    Messages:
    269
    Likes Received:
    1
    Trophy Points:
    18
    Location:
    Bakersfield, California
    SELinux causes more headaches than it's worth on cPanel boxes. If you need something to secure the system a bit more, look at grsecurity. Even with the most minimal security settings and locking down /dev/mem, /dev/kmem, and /dev/port it works better than SELinux.
     
Loading...

Share This Page