On 12/18/19 4:05 PM, Alberto Viana wrote:
Mark,

Yes, I'm.

To compile lib389 I installed a package for python3 called "selinux" (via pip)

# pip3 show selinux
Name: selinux
Version: 0.2.1
Summary: shim selinux module
Home-page: https://github.com/pycontribs/selinux
Author: Sorin Sbarnea
Author-email: sorin.sbar...@gmail.com <mailto:sorin.sbar...@gmail.com>
License: MIT license

May be am I missing this lib(python3-libselinux)?

It's a requirement for lib389 in our specfile, should be easy to check for it.

What if you try an rpm using "make -f rpm.mk rpms" from the 389-ds-base/ directory?



On Wed, Dec 18, 2019 at 5:39 PM Mark Reynolds <mreyno...@redhat.com <mailto:mreyno...@redhat.com>> wrote:


    On 12/18/19 3:21 PM, Alberto Viana wrote:
    Hi Guys,

    I compiled my 389 with selinux enabled (--with-selinux):

    configure:21564: checking for --with-selinux
    configure:21575: result: yes

    with_selinux='yes'

    but If I ran dscreate interactive, shows me:
    selinux is disabled, will not relabel ports or files.

    The selinux is enabled on the system
    ~# getenforce
    Enforcing

    Centos7
    # ns-slapd -v
    389 Project
    389-Directory/1.4.2.4 <http://1.4.2.4> B2019.352.1557


    What am I missing? Could not found any related doc at 389 or rhds
    pages.

    Not sure, this is the code that is generating the error message:


            import selinux
            if selinux.is_selinux_enabled():
                # We have selinux, continue.
                status = True
            else:
                # We have the module, but it's disabled.
                log.error('selinux is disabled, will not relabel ports
    or files.' )


    So this is all happening in the python library
    (python3-libselinux).  Are you running dscreate as root?

    Mark


    Thanks.

    Alberto Viana


    _______________________________________________
    389-users mailing list --389-users@lists.fedoraproject.org  
<mailto:389-users@lists.fedoraproject.org>
    To unsubscribe send an email to389-users-le...@lists.fedoraproject.org  
<mailto:389-users-le...@lists.fedoraproject.org>
    Fedora Code of 
Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
    List Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
    List 
Archives:https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

--
    389 Directory Server Development Team

--

389 Directory Server Development Team

_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org

Reply via email to