| 1 |
commit: d4dd801cfdfc6fabff6498fe7eeaaab11a2fad29 |
| 2 |
Author: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
| 3 |
AuthorDate: Sat Apr 30 19:42:41 2011 +0000 |
| 4 |
Commit: Sven Vermeulen <sven.vermeulen <AT> siphos <DOT> be> |
| 5 |
CommitDate: Sat Apr 30 19:42:41 2011 +0000 |
| 6 |
URL: http://git.overlays.gentoo.org/gitweb/?p=proj/hardened-docs.git;a=commit;h=d4dd801c |
| 7 |
|
| 8 |
Add FAQ on emerge not working (no sysadm_r role) |
| 9 |
|
| 10 |
--- |
| 11 |
xml/selinux-faq.xml | 32 +++++++++++++++++++++++++++++++- |
| 12 |
1 files changed, 31 insertions(+), 1 deletions(-) |
| 13 |
|
| 14 |
diff --git a/xml/selinux-faq.xml b/xml/selinux-faq.xml |
| 15 |
index b300301..d042d2c 100644 |
| 16 |
--- a/xml/selinux-faq.xml |
| 17 |
+++ b/xml/selinux-faq.xml |
| 18 |
@@ -17,7 +17,7 @@ The FAQ is a collection of solutions found on IRC, mailinglist, forums or |
| 19 |
elsewhere |
| 20 |
</abstract> |
| 21 |
|
| 22 |
-<version>4</version> |
| 23 |
+<version>5</version> |
| 24 |
<date>2011-04-30</date> |
| 25 |
|
| 26 |
<faqindex> |
| 27 |
@@ -385,5 +385,35 @@ hidden). |
| 28 |
|
| 29 |
</body> |
| 30 |
</section> |
| 31 |
+<section id="emergefails"> |
| 32 |
+<title>Emerge does not work, giving 'Permission denied: /etc/make.conf'</title> |
| 33 |
+<body> |
| 34 |
+ |
| 35 |
+<p> |
| 36 |
+This is to be expected if you are not using the <c>sysadm_r</c> role. Any |
| 37 |
+Portage related activity requires that you are in the <c>sysadm_r</c> role. To |
| 38 |
+transition to the role, first validate if you are currently known as |
| 39 |
+<c>staff_u</c> (or, if you added your own SELinux identities, a user that has |
| 40 |
+the permission to transition to the <c>sysadm_r</c> role). Then run <c>newrole |
| 41 |
+-r sysadm_r</c> to transition. |
| 42 |
+</p> |
| 43 |
+ |
| 44 |
+<pre caption="Transitioning to sysadm_r"> |
| 45 |
+~$ <i>emerge --info</i> |
| 46 |
+Permission denied: '/etc/make.conf' |
| 47 |
+~$ <i>id -Z</i> |
| 48 |
+staff_u:staff_r:staff_t |
| 49 |
+~$ <i>newrole -r sysadm_r</i> |
| 50 |
+Password: <comment># Enter your users' password</comment> |
| 51 |
+</pre> |
| 52 |
+ |
| 53 |
+<p> |
| 54 |
+This is also necessary if you logged on to your system as root but through SSH. |
| 55 |
+The default behavior is that SSH sets the lowest role for the particular user |
| 56 |
+when logged on. And you shouldn't allow remote root logins anyhow. |
| 57 |
+</p> |
| 58 |
+ |
| 59 |
+</body> |
| 60 |
+</section> |
| 61 |
</chapter> |
| 62 |
</guide> |
Archives