Newbie install, frustrations with gpg key and msql permissions

[nowork]

Hi,

I can't get squeezecenter to install/run on Fedora.

I decided to set up squeezecenter on a linux box. I purchased the MSI Nettop 100 (Atom Dual Core N330) and added memory and hard drive. I installed Fedora 10 and allowed all patches to install. Fedora seems to run OK.

I tried to install Squeezecenter 7.3.2 with yum and rpm. No luck. I ran into the previously reported bug related to no GPG key (http://bugs.slimdevices.com/show_bug.cgi?id=8531 ) which I thought was closed/fixed but it bit my installation. (Is this bug fixed or not?) I got around this bug by using yum with the --gpgnocheck option. Squeezecenter installed, and perl and msql were updated.

Now I try to start the squeezecenter service and SeLinux complains about AVC denial with "The squeezecenter-s application attempted to load /usr/share/squeezecenter/CPAN/arch/5.10/i386-linux-thread-multi/auto/DBD/mysql/mysql.so which requires text relocation. This is a potential security problem. Most libraries do not need this permission. Libraries are sometimes coded incorrectly and request this permission. The SELinux Memory Protection Tests web page explains how to remove this requirement. You can configure SELinux temporarily to allow /usr/share/squeezecenter/CPAN/arch/5.10/i386-linux-thread-multi/auto/DBD/mysql/mysql.so to use relocation as a workaround, until the library is fixed. Please file a bug report against this package.

SeLinux suggests a root chcon -t textrel_shlib_t '/usr/share/squeezecenter/CPAN/arch/5.10/i386-linux-thread-multi/auto/DBD/mysql/mysql.so' Tried the command. Still could not start squeezecenter.

Any suggestions or comments? (This is my first ever install of linux)

Thanks

[soxfan]

If this system is behind a firewall on your own local, private network I would recommend totally disabling both SeLinux and the built-in Fedora firewall.

[nowork]

Thanks.

Disabling SeLinux allowed squeezecenter to start/run. Much appreciated, as I am a newbie to Linux.

However, the no GPG key bug report and the fact that the SqueezeCenter RPM Wiki says, "The SqueezeCenter RPM will work with SELinux enabled on CentOS 5 and all current versions of Fedora," make me think there the intention is for Squeezecenter to work seamlessly.

Is is appropriate to update the GPG bug traker, and add the SeLinux issue?

Thanks again.

[soxfan]

Well, I don't think SELinux had anything to do with the GPG key issues. Also, just quickly scanning the Bugzilla report for this issue it appears that it is fixed for 7.3.3, which has not officially been released yet.

SELinux can be very helpful for hardening a Linux system if you can figure out how to use it. I've been using Linux for a long time now and have never really been able to master it, not that I can say I've put a lot of time into trying. For me, as a rule of thumb when setting up any Linux system as long as I'm comfortable that I'm working behind a good firewall I always disable SELinux and the built-in firewall. Others may disagree, but in general, especially when working with network services I think you will find things much easier this way.

[boomdijk]

Thanks.

Disabling SeLinux allowed squeezecenter to start/run. Much appreciated, as I am a newbie to Linux.

However, the no GPG key bug report and the fact that the SqueezeCenter RPM Wiki says, "The SqueezeCenter RPM will work with SELinux enabled on CentOS 5 and all current versions of Fedora," make me think there the intention is for Squeezecenter to work seamlessly.

Is is appropriate to update the GPG bug traker, and add the SeLinux issue?

Thanks again.

I also am a newbie at linux...

I had/have the same problem as you have:
1. GPG key: You have to download and install the security key to recognize the repo as a "safe" repository (loopup import GPG key)

2. Now for my question: Is there a way to keep the SElinux on and start Squeezecenter, because i am using the Linux machine also as a mailserver and webserver... So i would leave the security in place???

Can anyone help?