Re: NM causes network to go down

[Ryan Novosielski <novosirj umdnj edu>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Don Buchholz wrote:
> 
> Dan Williams wrote:
>>>> On Wed, 2008-01-30 at 22:34 +0100, Bjørge Solli wrote:
>>>>> The strange thing is that I cannot even log in as root (not in gdm nor 
>>>>> in text console), I had to reboot into runlevel 1  ...<snip>...
>>  
>> Probably because your home directory or authentication is set up to use
>> the network?  It used to be the case that if you had set up kerberos
>> logins from system-config-authentication and you didn't have a network,
>> then even root could not log in.  Probably some variation of that.
>>
> 
> I installed a very minimal set of packages (<400) on a Fedora 8 system
> (no graphical interface at all, meant for bare-bones FTP and Apache service)
> and found it necessary to turn off SELinux by putting "selinux=0" in the
> kernel args in grub.conf to allow *any* account to login to a text console.
> 
> A sample of the SELinux/audit message in syslog file:
>    Feb 22 09:29:06 testhost kernel: audit(1203701346.285:4): avc:  denied
>      { entrypoint } for  pid=2136 comm="login" path="/bin/bash" dev=dm-0
>      ino=1736707 scontext=system_u:system_r:hotplug_t:s0-s0:c0.c1023
>      tcontext=system_u:object_r:file_t:s0 tclass=file
> 
> "login" isn't allowed to access "/bin/bash"?!?
> 
> I probably need to take this one to another [SELinux] forum, eh?
> Not really keen on disabling SELinux for a box that will eventually
> sit on the Internet.  :drunk:

Seems like something got screwed up here. Try looking into the
"restorecon" command.

=R

- --
 ---- _  _ _  _ ___  _  _  _
 |Y#| |  | |\/| |  \ |\ |  | |Ryan Novosielski - Systems Programmer II
 |$&| |__| |  | |__/ | \| _| |novosirj umdnj edu - 973/972.0922 (2-0922)
 \__/ Univ. of Med. and Dent.|IST/AST - NJMS Medical Science Bldg - C630
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFHwvF7mb+gadEcsb4RAh0ZAJ0bHoC8nBNCxVFcsws/NxWexyjiawCeI8YP
o66UjU9M3CUwUKANexcayqg=
=8lrB
-----END PGP SIGNATURE-----

begin:vcard
fn:Ryan Novosielski
n:Novosielski;Ryan
org:UMDNJ;IST/AST
adr;dom:MSB C630;;185 South Orange Avenue;Newark;NJ;07103
email;internet:novosirj umdnj edu
title:Systems Programmer II
tel;work:(973) 972-0922
tel;fax:(973) 972-7412
tel;pager:(866) 20-UMDNJ
x-mozilla-html:FALSE
version:2.1
end:vcard