[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[linux_var] Permessi porte https utente selinux xguest su Fedora
- To: talking@ml.linuxvar.it
- Subject: [linux_var] Permessi porte https utente selinux xguest su Fedora
- From: liviopadovesi@openmailbox.org
- Date: Sun, 29 Jul 2018 13:44:33 -0000
- Arc-authentication-results: i=1; mx.google.com; dkim=pass header.i=@ml.linuxvar.it header.s=mail header.b=jdNCmF+a; spf=pass (google.com: domain of talking-bounces@ml.linuxvar.it designates 79.143.178.54 as permitted sender) smtp.mailfrom=talking-bounces@ml.linuxvar.it; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=openmailbox.org
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=sender:errors-to:content-transfer-encoding:reply-to:list-subscribe :list-help:list-post:list-archive:list-unsubscribe:list-id :precedence:subject:message-id:to:user-agent:date:from:mime-version :dkim-signature:arc-authentication-results; bh=6xoXBjJX33GaOnm6f8SL43dYz58bx9dkwedtvps+HKA=; b=TMyfh9hZ1OzPks9CqcCihL9DwEn0PZAIfFku7lVmC3wrDgym3gw3gt+aFGSBZTxQqh dZg8TYQ+311ueQSmjWHYCRuchAhL5iM8UjeD9GA/07BwI8dMt/CNYzLTq9uG6yFuwiOk yOkztuGg0DRIZbzxFgxNTwGYpOpoWqukuD4saFQO8ie3+5Vb+Hf99MKMx7l1EVqCPO57 /fHhmaF9X3a9PkGmKTNsYQbsYvTv+9Zu/Mn5JeL1dQtoj+NsjOtUboXhrxqBsQG2GT/n OFxK4CnwQ8dQ2/lpdT9vz3bEZTf4qQGGzFsT8rqGC7XkkwcAp94sPGHeEJ/HbNcvW0JE EvkQ==
- Arc-seal: i=1; a=rsa-sha256; t=1532872476; cv=none; d=google.com; s=arc-20160816; b=PPfa25rcctcYAd8HFQeuys9jA7CgyY8d7wMHWHxXPBghbSh/Tlr/4KBLkrAjkoz4vB bQszsT2CMA1NjK2RfhryNhVNwx1gH+bEYpZywNkGWVksiH0btkh5NBa3Coj4X0uvv0lQ umF+hXn46sIQnnIpQHuGomW+QoksqvcWlCRhOLzWWFhFQZfRKhMyxTpe2u9KtsrBr8vd fp0CvJdBkB6uRTU5OBk8jHGEsKJjJlh9dd8vECrhnjphJ8kYgsgs/DOOYkgzaRqpTuxN s8PvyOfV3PsM7ePXUdRxwKVh8fI1KF1FCz4VMRvNRwys6n3yzrqYfx5BLt8SEdapF6Pm f4oQ==
- Authentication-results: mx.google.com; dkim=pass header.i=@ml.linuxvar.it header.s=mail header.b=jdNCmF+a; spf=pass (google.com: domain of talking-bounces@ml.linuxvar.it designates 79.143.178.54 as permitted sender) smtp.mailfrom=talking-bounces@ml.linuxvar.it; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=openmailbox.org
- Authentication-results: linuxvar.it; dkim=none reason="no signature"; dkim-adsp=fail (unprotected policy); dkim-atps=neutral
- Delivered-to: g.crinux@gmail.com
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ml.linuxvar.it; s=mail; t=1532871875; bh=6xoXBjJX33GaOnm6f8SL43dYz58bx9dkwedtvps+HKA=; h=From:Date:To:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Reply-To; z=From:=20liviopadovesi@openmailbox.org|Date:=20Sun,=2029=20Jul=202 018=2013:44:33=20-0000|To:=20talking@ml.linuxvar.it|Subject:=20[li nux_var]=20Permessi=20porte=20https=20utente=20selinux=20xguest=20 su=20Fedora|List-Id:=20linux_var=20-=20LUG=20di=20Varese=20e=20Pro vincia=20Mailing=20List=0D=0A=20<talking.ml.linuxvar.it>|List-Unsu bscribe:=20<http://ml.linuxvar.it/cgi-bin/mailman/options/talking> ,=0D=0A=20<mailto:talking-request@ml.linuxvar.it?subject=3Dunsubsc ribe>|List-Archive:=20<http://ml.linuxvar.it/pipermail/talking/>|L ist-Post:=20<mailto:talking@ml.linuxvar.it>|List-Help:=20<mailto:t alking-request@ml.linuxvar.it?subject=3Dhelp>|List-Subscribe:=20<h ttp://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>,=0D=0A=20<m ailto:talking-request@ml.linuxvar.it?subject=3Dsubscribe>|Reply-To :=20linux_var=20-=20LUG=20di=20Varese=20e=20Provincia=20Mailing=20 List=0D=0A=20<talking@ml.linuxvar.it>; b=jdNCmF+aTE2aAGp3tPe6tQvtp83k8u0IXrW9OXr7U0YOuHGSBMbHJ5gXh3WTDqj9W mKroUiO8czkYepH4ENwg9+Z2Ulu/WVqEMOHufNOsFkr7ggnR4zNrH81ASK0hx0NHvw qGPTHifky5nQVJjzF8NkMbSvV4Ocop8oHqjGmHh8=
- List-archive: <http://ml.linuxvar.it/pipermail/talking/>
- List-help: <mailto:talking-request@ml.linuxvar.it?subject=help>
- List-id: linux_var - LUG di Varese e Provincia Mailing List <talking.ml.linuxvar.it>
- List-post: <mailto:talking@ml.linuxvar.it>
- List-subscribe: <http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking>, <mailto:talking-request@ml.linuxvar.it?subject=subscribe>
- List-unsubscribe: <http://ml.linuxvar.it/cgi-bin/mailman/options/talking>, <mailto:talking-request@ml.linuxvar.it?subject=unsubscribe>
- Reply-to: linux_var - LUG di Varese e Provincia Mailing List <talking@ml.linuxvar.it>
- Sender: "Talking" <talking-bounces@ml.linuxvar.it>
- User-agent: OpenMailBox Webmail
Ciao a tutti, sono nuovo e ho dei problemi che non riesco a risolvere da solo, spero che possiate aiutarmi.
Ho installato da poco Fedora, prima usavo Linux Mint.
Su Fedora di default non c'è la sessione ospite come su Mint o Ubuntu, quindi ho installato il pacchetto xguest per averla:
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/6/html/security-enhanced_linux/sect-security-enhanced_linux-confining_users-xguest_kiosk_mode
Ora la sessione ospite funziona, ma usandola con firefox non si riescono a visualizzare i siti in https.
Siti vecchi solo in http invece funzionano.
Penso che sia dovuto a Selinux che permette all'utente xguest di usare solo alcune porte (anche se la porta per l'https dovrebbe essere già consentita).
Leggendo queste due pagine:
https://www.systutorials.com/docs/linux/man/8-xguest_selinux/
https://www.systutorials.com/docs/linux/man/8-semanage-port/
penso che dovrei dare un comando simile a questo:
sudo semanage port -a -t xguest_t -p tcp 443
però con semanage port -l non vedo nessun xguest_t
Non avendo mai usato Selinux non so come fare, riuscite ad aiutarmi?
Grazie.
_______________________________________________
Talking mailing list
Talking@ml.linuxvar.it
http://ml.linuxvar.it/cgi-bin/mailman/listinfo/talking