To summarize, the findings to date by Robert Jacobson and myself indicate that:
1. The first SELinux solution given by the cobbler check command should be: /usr/sbin/semanage fcontext -a -t public_content_t "/var/lib/tftpboot(/.*)?" && /usr/sbin/semanage fcontext -a -t public_content_t "/var/www/cobbler/images(/.*)?" followed by /sbin/restorecon –v /var/lib/tftpboot and /sbin/restorecon –v /var/www/cobbler/images The directory /var/www/cobbler/images does not appear to be created by the cobbler installation. Either the installation will need to create this file or it will need to be created manually prior to issuing the restorecon command. 2. The second SELinux solution given by the cobbler check command should be: /usr/sbin/semanage fcontext -a -t httpd_sys_rw_content_t "/var/lib/cobbler/webui_sessions(/.*)?" followed by /sbin/restorecon –v /var/lib/cobbler/webui_sessions Also, the test that the cobbler check command uses to determine if this correction is necessary also needs the type tag changed from httpd_sys_content_rw_t to httpd_sys_rw_content_t. We have discovered other issues in both the cobbler import and cobbler sync commands that we will report in the future. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Stuart J. Newman Engineer 4; Systems Solar Dynamics Observatory (SDO) Honeywell Technology Solutions Inc NASA/Goddard Space Flight Center Building 14, Room E222 Mail Stop 428.2 Greenbelt, MD 20771 Office: (301) 286-5145 EMail: [email protected] ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ NOTICE: This communication, including any attachment, contains information that may be confidential or privileged, and is intended solely for the entity or individual to whom it is addressed. If you are not the intended recipient, please notify the sender at once, and you should delete this message and are hereby notified that any disclosure, copying, or distribution of this message is strictly prohibited. Nothing in this email, including any attachment, is intended to be a legally binding signature.
_______________________________________________ cobbler mailing list [email protected] https://fedorahosted.org/mailman/listinfo/cobbler
