The ldapi code I committed yesterday didn't work with SELinux enabled. This patch addresses that.

On Python 2.5+ systems the mgmt framework didn't work with SELinux enabled because of the ctypes module. It does all sorts of crazy stuff which makes SELinux absolutely freak out (it tries to execute things in /tmp, for example). This is used by uuid but we have our own local copy any because this isn't included in Python 2.4. ctypes is optional anyway so just disable it.

Finally have to disable the SELinux rules for dogtag CRL file publishing. The module would blow up if you don't have dogtag installed. Need to find another way. Disabling for now so the server can once again work in enforcing mode.

rob

Attachment: freeipa-261-selinux.patch
Description: application/mbox

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Freeipa-devel mailing list
Freeipa-devel@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-devel

Reply via email to