On Fri, Dec 12, 2008 at 11:49:47PM +0100, Anton Arapov wrote:
> On Fri, Dec 12, 2008 at 10:06:43PM +0100, Anton Arapov wrote:
[..skip..]
> And the last one:
>   node=bandura.englab.brq.redhat.com type=AVC msg=audit(1229121538.953:228):
>   avc: denied { read write } for pid=22082 comm="semanage" 
> path="socket:[96400]" dev=sockfs ino=96400
>   scontext=unconfined_u:unconfined_r:semanage_t:s0
>   tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=tcp_socket 
> , have no idea ... this hits just by adding .call(semanage). I tried to 
> reproduce
> it in test script, and everything works just fine.
> 
> Usually, such things solved by:
>   fcntl(socket, F_SETFD, FD_CLOEXEC),
> but it's python, and I do not see any sockets using,... evenmore, I do not see
> why we need 'import socket' in app.py and utils.py, I think they could be
> easily removed. ...
looks like I hit the known bug here:
https://bugzilla.redhat.com/show_bug.cgi?id=429678

will get more assurance and let you know.

--Anton

_______________________________________________
cobbler mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/cobbler

Reply via email to