If you’re wondering why SELinux is not printing a “denied” message in /var/log/audit/audit.log it’s probably because somebody wanted to hide it! Yes, it’s possible to prevent an SELinux module from logging a denied message. Disable this behaviour by executing the following command: semodule...
This time, I won't go into details about the context, but let's just say that for some compliance reasons, I needed to rename a user on a Linux desktop computer. Rename ? Why not create a new user ? 3 things : I wanted to keep the same UID/GID, and I don't like having 2 users with the same UID;...
Dans un billet précédent, j'avais réalisé une installation vraiment minimale de CentOS 7. Si globalement le cahier des charges était respecté, je me suis heurté à quelques petites déconvenues, je me suis donc dit qu'un billet sous forme d'errata ne serait pas de trop. SELinux Bon, d'accord,...
I hate SELinux. Hate hate hate hate it. Why? This is why. #!/bin/bash tmp="$(mktemp -d)" echo "Some content" > "${tmp}/file.txt" echo "Please find the report attached." | /bin/mailx -s "Daily report" -a "${tmp}/file.txt" "user@domain.local" rm "${tmp}/file.txt" rmdir "${tmp}" If you run this...