Re: Disable SELinux? (fwd)

Remco Barendse <[email protected]> Fri, 22 Apr 2005 08:54:22 +0200 (CEST)
Newsgroups gmane.linux.tao.general
Message-ID <[email protected]>
Thanks for your reply.

Ive been trying to get cyrus imap running for more then five hours yesterday 
night, without any luck or leads from google.

I then tried dovecot which worked after moving / renaming some files.

This morning however dovecot is denying all access to the mailboxes again. 
*nothing* in the logs about anything benied denied.

I regret having installed RHEL4 and will probably nuke the box to go back to 
RHEL3. This just sucks, I'm having even more problems than I had with gentoo



On Thu, 21 Apr 2005, Wayne Henley wrote:

> Cyrus uses it's own internal database structure to store the messages and 
> I've always had to do some kind of configuration for authentication and then 
> add users on RedHat based systems.
> 
> I'm sorry, but I've been using SuSE for over three years now, it comes with 
> cyrus pre-configured, so I can't provide any configuration advice for you.
> 
> Maybe check out the "official" RHEL docs here:
> 
> http://www.redhat.com/docs/manuals/enterprise/
> 
> They may be of some assistance.
> 
> Wh
> 
> 
> Remco Barendse wrote:
>> thanks! indeed service cyrus-imapd did start the service
>> 
>> however, i copied all the /home stuff over and /var/spool/mail but I get all 
>> sorts of messages that the mailbox doesn't exist
>> 
>> is there anything special i should do when restoring the mailboxes?
>> 
>> there are no errors in the maillog
>> 
>> thanks!
>> 
>> 
>> On Thu, 21 Apr 2005, Wayne Henley wrote:
>> 
>>> It's now part of the Cyrus mail package.
>>> service cyrus start should get you going.
>>> 
>>> WH
>>> 
>>> Remco Barendse wrote:
>>> 
>>>> On Thu, 21 Apr 2005, Ed Wilts wrote:
>>>> 
>>>>> On Thu, Apr 21, 2005 at 11:25:56AM +0200, Remco Barendse wrote:
>>>>> 
>>>>>> I installed a production box and selected to use SELinux.
>>>>>> 
>>>>>> Because of all the crap it's giving me (I'm not even able to setup dhcp
>>>>>> grrr...) I want to disable it completely.
>>>>> 
>>>>> 
>>>>> 
>>>>> I believe you're taking the wrong approach.  Because you don't know how
>>>>> to use the tool properly doesn't mean you should throw it away.  SELinux
>>>>> offers a lot of additional security and it's to your advantage if you
>>>>> know how to manage it.
>>>>> 
>>>>> Red Hat has published a manual dedicated to SELinux.
>>>>> 
>>>>> http://www.redhat.com/docs/manuals/enterprise/RHEL-4-Manual/selinux-guide/ 
>>>>> You could find chapter 4 interesting - the example is dhcpd.
>>>> 
>>>> 
>>>> 
>>>> I do believe you are right, however..... One of my production boxes 
>>>> running Gentoo busted and I needed to re-install it. Gentoo was giving me 
>>>> all sorts of headaches (and it was the last box running Gentoo anyway) so 
>>>> I just installed the RHEL4 rebuild. After 3 hours browsing trying to even 
>>>> get DHCP working (it didn't accept my dhcpd.conf) I preffered getting 
>>>> things up and running again instead of stalling the process further
>>>> 
>>>> (Yes, the RedHat manual does state that you shouldn't try deplying it on a 
>>>> production box right away) :)
>>>> 
>>>> I'm now up and running and when I figure out how to properly do SELinux I 
>>>> will enable it later.
>>>> 
>>>> BTW, I also installed IMAP but cannot find any way to activate IMAP or 
>>>> POP, not in ntsysv nor in xinetd.d
>>>> 
>>>> Is it in a `hidden' place or is it that they just didn't include the 
>>>> xinetd.d file for security reasons?
>>>> _______________________________________________
>>>> Tao-discuss mailing list
>>>> [email protected]
>>>> http://mailman.taolinux.org/mailman/listinfo/tao-discuss
>>> 
>>> 
>