On Tue, Dec 16, 2008 at 07:28:17PM -0500, Michael DeHaan wrote:
>
>> Well yes, we run restorecon on /var/satellite to set correct context,
>> even if you are not in Enforcing. It is not expected to fail thou.
>   
> Also calling restorecon with selinux disabled probably won't work.    

Well, we could check sestatus for disabled. But in this case the
problem was more related to the mount point (/var/satellite) being
NFS.

> Cobbler makes sure it doesn't bother with restorecon in those instances.
>
> Enable in /etc/selinux, touch /.autorelabel, and reboot?
>
> You'd want to strive for 100% clean runs in setroubleshoot.

Right.

> FYI -- Recently Dan Walsh recommended I /not/ support SELinux on EL 4,  
> and only do EL 5 since it was more manageable (supports  
> public_content_t).    Seeing this impacts spacewalk, I would suggest  
> spacewalk take the same position.

Yes, I used to be taking the same position.

-- 
Jan Pazdziora
Satellite Engineering, Red Hat

_______________________________________________
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel

Reply via email to