Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-21 Thread Jon LaBadie
On Wed, Sep 20, 2017 at 05:54:19PM +0800, Ed Greshko wrote: > On 09/20/17 17:33, Frédéric Bron wrote: > >> ls -Zd /etc > > system_u:object_r:etc_t:s0 /etc/ > > > > looks fine? > > > > Yes, perfectly fine... > > How the output of this? > > restorecon -F -v /etc/passwd > > FWIW, looking in /etc/s

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Ed Greshko
On 09/20/17 18:13, Frédéric Bron wrote: >> How the output of this? >> >> restorecon -F -v /etc/passwd > Relabeled /etc/passwd from unconfined_u:object_r:passwd_file_t:s0 to > system_u:object_r:passwd_file_t:s0 > > So the force option was necessary? Yes  But I don't think unconfined_u:object_r:

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Frédéric Bron
> How the output of this? > > restorecon -F -v /etc/passwd Relabeled /etc/passwd from unconfined_u:object_r:passwd_file_t:s0 to system_u:object_r:passwd_file_t:s0 So the force option was necessary? ___ users mailing list -- users@lists.fedoraproject.org

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Ed Greshko
On 09/20/17 17:33, Frédéric Bron wrote: >> ls -Zd /etc > system_u:object_r:etc_t:s0 /etc/ > > looks fine? > Yes, perfectly fine... How the output of this? restorecon -F -v /etc/passwd FWIW, looking in /etc/selinux/targeted/contexts/files/file_contexts I see /etc/passwd[-\+]?   -- 

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Frédéric Bron
> ls -Zd /etc system_u:object_r:etc_t:s0 /etc/ looks fine? ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Ed Greshko
On 09/20/17 16:22, Frédéric Bron wrote: >> A few questions >> >> 1. Is the file /.autorelabel gone? It should be, after a relabel. > yes and I saw the relabeling operation. After that, the computer rebooted. > >> 2. Do you happen to know what the labels were previously? > Halas, I do not kno

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Frédéric Bron
> A few questions > > 1. Is the file /.autorelabel gone? It should be, after a relabel. yes and I saw the relabeling operation. After that, the computer rebooted. > 2. Do you happen to know what the labels were previously? Halas, I do not know. > 3. If you do a "restorecon /etc/passwd"

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-20 Thread Lukas Vrabec
On 09/19/2017 07:14 PM, Rick Stevens wrote: On 09/18/2017 11:24 AM, Frédéric Bron wrote: Hi, I created a new user using kuser. I wanted to change his password with passwd user : $ su $ passwd user I got the following error: passwd: Erreur de manipulation du jeton d'authentification Then I did

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-19 Thread Ed Greshko
On 09/20/17 14:14, Frédéric Bron wrote: >> What is the label for /etc/passwd and /etc/shadow, this may be unrelated but >> I have experienced a similar issue and the /etc/shadow was not labelled >> correctly by SELinux. > after relabeling I have: > # ls -Z /etc/{passwd,shadow} > unconfined_u:object

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-19 Thread Frédéric Bron
> What is the label for /etc/passwd and /etc/shadow, this may be unrelated but > I have experienced a similar issue and the /etc/shadow was not labelled > correctly by SELinux. after relabeling I have: # ls -Z /etc/{passwd,shadow} unconfined_u:object_r:passwd_file_t:s0 /etc/passwd unconfined_

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-19 Thread Rick Stevens
On 09/18/2017 11:24 AM, Frédéric Bron wrote: > Hi, > > I created a new user using kuser. > I wanted to change his password with passwd user : > $ su > $ passwd user > > I got the following error: > passwd: Erreur de manipulation du jeton d'authentification > > Then I did: > $ setenforce 0 > and

Re: Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-19 Thread Earl A Ramirez
On 18 September 2017 at 14:24, Frédéric Bron wrote: > Hi, > > I created a new user using kuser. > I wanted to change his password with passwd user : > $ su > $ passwd user > > I got the following error: > passwd: Erreur de manipulation du jeton d'authentification > > Then I did: > $ setenforce 0

Problem with SELinux: cannot change password, cannot open Plasma session

2017-09-19 Thread Frédéric Bron
Hi, I created a new user using kuser. I wanted to change his password with passwd user : $ su $ passwd user I got the following error: passwd: Erreur de manipulation du jeton d'authentification Then I did: $ setenforce 0 and it worked. Later, I reenabled selinux: $ setenfoce 1 and the user tri