Re: RoR, apache, passenger deployment problems

2014-07-31 Thread Pete Stieber
On 7/31/2014 10:53 PM, SM = Shuichiro Makigaki wrote: SM> Pete, SM> SM> I think selinux is running on enforcing mode? SM> `sudo setenforce permissive` may make you happy SM> temporarily, I think. Please try it. Thanks. That helped. Now I have deployment errors I have to figure them out before

Re: RoR, apache, passenger deployment problems

2014-07-31 Thread Shuichiro Makigaki
Pete, I think selinux is running on enforcing mode? `sudo setenforce permissive` may make you happy temporarily, I think. Please try it. It's also valuable to check /var/log/audit.log (or use journalctl). If permissive-mode selinux solves your issue, the next step is to google it :-) https://www.

RoR, apache, passenger deployment problems

2014-07-31 Thread Pete Stieber
I'm trying to deploy a sample ruby on rails application on Fedora 20. The application runs locally using WEBrick. I have the mod_passenger-4.0.18-4.fc20.x86_64 package and the associated ruby gems installed. I'm very new to this so I'm sure I'll be asking some stupid questions. The first th

Re: SELinux contexts

2014-07-31 Thread Paolo Galtieri
On 07/31/2014 11:28 AM, Daniel J Walsh wrote: On 07/31/2014 01:52 PM, Paolo Galtieri wrote: On 07/31/2014 09:51 AM, Michael Cronenworth wrote: On 07/31/2014 10:54 AM, pgaltieri . wrote: sudo semanage fcontext -a -t var_log_t 'logs' [snip] You need to pass the full path here. # semanage fcon

Broadcasts and netmask

2014-07-31 Thread CLOSE Dave
I have a Fedora 20 machine which is receiving UDP broadcast packets at regular intervals on a high port. No program is presently listening for these packets. If I run, "tcpdump -iany port 29531", I see each of the packets arriving just as I expect. But if I then use Ncat as a surrogate for an appl

Re: SELinux contexts

2014-07-31 Thread Daniel J Walsh
On 07/31/2014 01:52 PM, Paolo Galtieri wrote: > On 07/31/2014 09:51 AM, Michael Cronenworth wrote: >> On 07/31/2014 10:54 AM, pgaltieri . wrote: >>> sudo semanage fcontext -a -t var_log_t 'logs' >> [snip] >> >> You need to pass the full path here. >> >> # semanage fcontext -a -t var_log_t /media/N

Re: SELinux contexts

2014-07-31 Thread Paolo Galtieri
On 07/31/2014 09:51 AM, Michael Cronenworth wrote: On 07/31/2014 10:54 AM, pgaltieri . wrote: sudo semanage fcontext -a -t var_log_t 'logs' [snip] You need to pass the full path here. # semanage fcontext -a -t var_log_t /media/NSM/NSM-SENSOR-2/logs I tried that and the restorecon and the fil

Re: SELinux contexts

2014-07-31 Thread Michael Cronenworth
On 07/31/2014 10:54 AM, pgaltieri . wrote: sudo semanage fcontext -a -t var_log_t 'logs' [snip] You need to pass the full path here. # semanage fcontext -a -t var_log_t /media/NSM/NSM-SENSOR-2/logs -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription optio

SELinux contexts

2014-07-31 Thread pgaltieri .
I received a SELinux alert today which said: SELinux is preventing /usr/local/bin/snort from search access on the directory logs. One of the options was to do: semanage fcontext -a -t FILE_TYPE 'logs' (lots of FILE_TYPEs) followed by restorecon -v 'logs' So here is what happens: ll -Zd logs

Re: [Bulk] Re: confine user(s) to a core with systemd + gcgroup

2014-07-31 Thread lejeczek
with new rhel 7 it's not difficult to image common setups where... which one is it - multi-user.target or network.target is the target and no gui these naturally most often than not will be multicore/multisocket systems and an admin would like to set a sort of hard ceiling above which users run

Re: OT: ssh and svn+ssh with different keys

2014-07-31 Thread Hiisi
On 28 July 2014 20:54, Rick Stevens wrote: > "ssh -i " allows you to use a different identity > than the default ~/.ssh/id_[d|r]sa" file. > -- > Solved. The problem was that ssh-copy-id didn't copied rsa.pub. Pasted it manually