On Fri, 2012-05-18 at 11:53 -0400, Rob Crittenden wrote:
> We don't have an explicit requires on the policycoreutils package in the
> client because SELinux is not required (just recommended).
> SELinux can be enabled without this package so check for that condition
> and don't allow installation if it is the case. The resulting install
> will be rather broken.
> Also check on the server when installing. This should never happen but
> in theory it could do the server install then fail in the client because
> of this.
This works fine. I am just thinking if we should not rather use paths
in /usr/ for the check if a binary exists, i.e. check
for /usr/sbin/restorecon instead of /sbin/restorecon on Fedora.
If we don't do this we need to be sure that the /sbin -> /usr/sbin
symlink created during UsrMove will stay on the system.
Freeipa-devel mailing list