From: Stephen Smalley <sds@tycho.nsa.gov>
To: Bond Masuda <bond.masuda@jlbond.com>, selinux@tycho.nsa.gov
Subject: Re: how to run setsebool -P in chroot?
Date: Mon, 21 Sep 2015 16:12:05 -0400 [thread overview]
Message-ID: <56006495.8080003@tycho.nsa.gov> (raw)
In-Reply-To: <55FC9E8B.8000604@jlbond.com>
On 09/18/2015 07:30 PM, Bond Masuda wrote:
> Hello,
>
> I'm trying to run setsebool in a chroot environment like:
>
> chroot /mnt/test /usr/sbin/setsebool -P antivirus_can_scan_system 1
>
> But I get:
>
> setsebool: SELinux is disabled.
>
> I'm guessing this is because the environment is not running. Is there a
> way around this? I need to be able to set some of the booleans this way.
I would try using semanage boolean -N instead of setsebool -P.
prev parent reply other threads:[~2015-09-21 20:12 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-09-11 11:55 Can I change default policy from targeted to minimum Divya Vyas
2015-09-11 13:41 ` Dominick Grift
2015-09-11 15:45 ` Divya Vyas
2015-09-11 15:53 ` Dominick Grift
2015-09-11 16:43 ` Divya Vyas
2015-09-11 16:51 ` Dominick Grift
2015-09-11 17:11 ` Stephen Smalley
2015-09-18 23:30 ` how to run setsebool -P in chroot? Bond Masuda
2015-09-20 21:13 ` Paul Moore
2015-09-21 20:12 ` Stephen Smalley [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=56006495.8080003@tycho.nsa.gov \
--to=sds@tycho.nsa.gov \
--cc=bond.masuda@jlbond.com \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.