Monday, June 9, 2008

SELinux Administration - Make ssh connection fast

Recently, I changed the operating system of my Linux machine from Fedora Core 3 to 9. Since that change I have faced several problems. One strange thing is too slow ssh connection. I thought that it might be related to firewall setting. So I turned off all firewall configurations by 'iptables -F' command but nothing changed. Eventually I found that the anwser is in SELinux setting.
There is a GUI-based system management tool called 'SELinux Management' in System->Administration menu. With clicking the Boolean tab in the left side many marked or unmarked policies appear. There are two ssh-related policies: allow_ssh_keysign and ssh_sysadm_login. I am not sure what these policies exactly do but ssh connection becomes faster after setting both policies. We can also change these values
shell# setsebool -P allow_ssh_keysign=1
shell# setsebool -P ssh_sysadm_login=1

Sunday, June 8, 2008

Installing 'VMware Tools' in Fedora Core 9

When I tried to install 'VMware Tools' in a guest machine running Fedora Core 9, it asked me the location of the directory of C header files that match the currently running kernel (i.e. Linux 2.6.25-14.fc9.i686). Although the standard Fedora distribution does not contain its source code, its header files are open. 'kernel-devel' package provides the header files of a kernel. With 'yum' we can easily get the kernel-devel package and extract header files.
shell# yum install kernel-devel-2.6.25-14.fc9.i686
The header files are automatically extracted and located to '/usr/src/kernels/2.6.25-14.fc9/i686/include': use this path to install VMware Tools.