https://bugzilla.redhat.com/show_bug.cgi?id=1424823



--- Comment #8 from Randy Barlow <[email protected]> ---
I've got my server manually patched with parts of the patch I attached[0] on
this ticket, as well as a manually installed version of the selinux policies.

Assuming my selinux patches have been released to F26 (which again, I don't
know how to verify other than just trying it?), there are two things you can do
manually that I think will get you running:

0) Edit the service file (/usr/lib/systemd/system/ejabberd.service) to do what
I did in the patch[0]. This will get ejabberd to run as ejabberd_t instead of
init_t, since it won't launch as bash anymore.
1) Unapply the policykit patch to /usr/bin/ejabberdctl, which basically means
changing the shebang line back to /usr/bin/bash. I wasn't able to get ejabberd
working with polkit *and* SELinux. I am on the fence about the value of
policykit for ejabberd anyway, when you can use sudo to grant access to users.

Hopefully I will find some non-dayjob time soon to do the above to the real
package so we can be back in business. I also need to finish updating ejabberd
to the newer release in rawhide...


[0] https://bugzilla.redhat.com/attachment.cgi?id=1268991&action=diff
[1]
https://src.fedoraproject.org/rpms/ejabberd/blob/master/f/ejabberd-0002-Enable-polkit-support.patch

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
erlang mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to