|| Geek ||
Please run the following command :
su -c ‘yum downgrade selinux-policy*’
April 24, 2011
Do you want to comment?
Comments RSS and TrackBack URI
Can we use empathy behind proxy now ?
I thought it already had the option of setting proxy information. I haven’t needed proxy for a long time so I can’t really be sure though
Let me try to explain. But before i do i want to admit that i have not been through this myself (So however unlikely, i may be wrong.)
SELinux in Fedora exempts users by default. That is because Fedora users usually do not want to be “restricted” by SELinux
But one can tune SELinux to restrict users as well.
Not many people use this restricted user enviromment though and thus it does not get much testing/ exposure.
What Fedora has done with Telepathy in the alpha stage is, restrict telepathy by default. This causes the SELinux restricted/protected telepathy to get some exposure (and hopefully feedback) so that Fedora can improve the policy for the restricted/protected telepathy.
Fedora recently made Telepathy “unconfined/unrestricted/unprotected” again because we are approaching beta to stable.
The funny thing is that you are suggesting downgrading, which would again restrict Telepathy i guess.
This is no solution, because whenever you upgrade policy from now on you will hit the same issues you hit now.
Instead you should kill your telepathy processes (or just relogin i guess), and restore the contexts of the executable files (but i imagine that the selinux-policy rpm did the latter for you?)
In theory that should fix your telepathy problems and will allow you to run telepathy unrestricted/unprotected again.
You could also restore the context of telepathy content in your directory but i do not think this is really needed. Since unrestricted users can interact with it in any way.
So why is this funny to me? Well in a way it proves to me that restricting the user space by default can be achieved in Fedora provided that it is done right. (e.g. make sure that no loss of functionality occurs)
I hope this to some extend explained to you what happened. The switch back to unconfined telepathy from telepathy selinux protected was far from elegant, but it is still Fedora beta so you can expect bugs. Consider this one of them.
Hrm.. I’ll be honest. I don’t know SELinux in as much detail as I’d like to. The solution was from the forums, and is a temporary work around at best (I guess). I’ll dig up more and see what the exact situation is when I have the time.
Thanks for the info though 🙂
To Praveen Kumar:
Yes you should after upgrading in theory be able to use proxies again. You could also have file a bug report so that Fedora could allow the restricted telepathy to use proxies…
to Praveen Kumar:
Err, actually only if telepathy/empathy supports proxies ofcourse. But SELInux should not prevent you from doing anything anymore if you update to latest SELinux policy…
Let me try it through proxy, Thanks for info 🙂
Looks like i was wrong. There was a little more at play here than i expected. Looks like there is no easy way back for now. So yes i guess downgrading would be a good temporary solution.
Fill in your details below or click an icon to log in:
You are commenting using your WordPress.com account. ( Log Out / Change )
You are commenting using your Twitter account. ( Log Out / Change )
You are commenting using your Facebook account. ( Log Out / Change )
You are commenting using your Google+ account. ( Log Out / Change )
Connecting to %s
Notify me of new comments via email.
Blog at WordPress.com.