On 4/24/2012 1:24 PM, Robert Jacobson wrote:
> On 4/24/2012 12:45 PM, James Cammarata wrote:
>> SElinux issue I brlieve. Cobbler check will give you the command to fix
>> that, though it has been noted in issue #139 that the label is incorrect.
>
> Well, it appears to be not only the label, but the path also needs to be
> changed. Stuart Newman already pointed this out in another email to the
> list. I'm not sure -- should Stuart be the one to make a correction/comment
> to issue 139?
>
>
> We think this is the correct command:
>
> /usr/sbin/semanage fcontext -a -t httpd_sys_rw_content_t
> "/var/lib/cobbler/webui_sessions(/.*)?"
>
> (changed "/.*" to "(/.*)?" because the webui_sessions directory needs the
> httpd_sys_rw_content_t context as well -- not the default var_lib_cobbler_t
> (I think that's what it was previously).
>
>
> Also, I don't see an issue on github regarding the other incorrect selinux
> commands for the tftpboot directory. This was also mentioned on the list
> earlier.
>
> Again, the correct commands appear to be:
>
> /usr/sbin/semanage fcontext -a -t public_content_t "/var/lib/tftpboot(/.*)?"
> && /usr/sbin/semanage fcontext -a -t public_content_t
> "/var/www/cobbler/images(/.*)?"
>
>
>
I forgot, after running the above commands, it's probably necessary to run
restorecon /var/lib/cobbler/webui_sessions
restorecon /var/lib/tftpboot
restorecon /var/www/cobbler/images
--
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Robert Jacobson [email protected]
Lead System Admin Solar Dynamics Observatory (SDO)
Bldg 14, E222 (301) 286-1591
_______________________________________________
cobbler mailing list
[email protected]
https://fedorahosted.org/mailman/listinfo/cobbler
