On 4/24/2012 12:45 PM, James Cammarata wrote:
> SElinux issue I brlieve. Cobbler check will give you the command to fix
> that, though it has been noted in issue #139 that the label is incorrect.

Well, it appears to be not only the label, but the path also needs to be 
changed.  Stuart Newman already pointed this out in another email to the list.  
I'm not sure -- should Stuart be the one to make a correction/comment to issue 
139?


We think this is the correct command:

/usr/sbin/semanage fcontext -a -t httpd_sys_rw_content_t 
"/var/lib/cobbler/webui_sessions(/.*)?"

(changed "/.*" to "(/.*)?" because the webui_sessions directory needs the 
httpd_sys_rw_content_t context as well -- not the default var_lib_cobbler_t (I 
think that's what it was previously).


Also, I don't see an issue on github regarding the other incorrect selinux 
commands for the tftpboot directory.  This was also mentioned on the list 
earlier.

Again, the correct commands appear to be:

/usr/sbin/semanage fcontext -a -t public_content_t "/var/lib/tftpboot(/.*)?" && 
/usr/sbin/semanage fcontext -a -t public_content_t 
"/var/www/cobbler/images(/.*)?"



-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Robert Jacobson               [email protected]
Lead System Admin       Solar Dynamics Observatory (SDO)
Bldg 14, E222                             (301) 286-1591 
_______________________________________________
cobbler mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/cobbler
  • [cobble... Newman, Stuart J. (GSFC-444.0)[HONEYWELL TECHNOLOGY SOLUTIONS INC]
    • Re... James Cammarata
      • ... Robert Jacobson
        • ... Robert Jacobson

Reply via email to