On Tue, Dec 16, 2008 at 07:28:17PM -0500, Michael DeHaan wrote: > >> Well yes, we run restorecon on /var/satellite to set correct context, >> even if you are not in Enforcing. It is not expected to fail thou. > > Also calling restorecon with selinux disabled probably won't work.
Well, we could check sestatus for disabled. But in this case the problem was more related to the mount point (/var/satellite) being NFS. > Cobbler makes sure it doesn't bother with restorecon in those instances. > > Enable in /etc/selinux, touch /.autorelabel, and reboot? > > You'd want to strive for 100% clean runs in setroubleshoot. Right. > FYI -- Recently Dan Walsh recommended I /not/ support SELinux on EL 4, > and only do EL 5 since it was more manageable (supports > public_content_t). Seeing this impacts spacewalk, I would suggest > spacewalk take the same position. Yes, I used to be taking the same position. -- Jan Pazdziora Satellite Engineering, Red Hat _______________________________________________ Spacewalk-devel mailing list Spacewalk-devel@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-devel