I do not know if selinux is always enabled with RHEL but we can definitively enforce the default selection as you said. But for that, we have to be sure that branch-5-1 actually uses mechanisms i developed in the past. Does anyone have a clue about that? I know Erich rewrote part of it for some reasons i never understood and therefore i do not know what is the current status...
----- Mail Original ----- De: "Abhishek Kulkarni" <[EMAIL PROTECTED]> À: [email protected] Envoyé: Dimanche 10 Août 2008 17:11:44 GMT -05:00 USA/Canada - États de l'Est Objet: Re: [Oscar-devel] branch-5-1 errors I have not encountered this in RHEL5 i386, but is SELinux enabled (or enforcing) by default on RHEL 5 x86_64? Can anybody confirm this? If yes, shouldn't the SELinux opkg be selected by default? $grep selinux share/package_sets/Default/rhel-5-x86_64.xml $ -- Abhishek On Sun, Aug 10, 2008 at 2:21 PM, <[EMAIL PROTECTED]> wrote: > Hi, > > If you do not install the selinux OPKG, it is clear that you will have > selinux related issues with your compute nodes. Please select that OPKG and > try again. > > Regards, > > > ----- Mail Original ----- > De: "Chuck Ritter" <[EMAIL PROTECTED]> > À: [email protected] > Envoyé: Vendredi 8 Août 2008 14:05:43 GMT -05:00 USA/Canada - États de > l'Est > Objet: Re: [Oscar-devel] branch-5-1 errors > > On 8/8/08, Abhishek Kulkarni <[EMAIL PROTECTED]> wrote: > > Chuck, > > This is quite weird. Typically, the OSCAR installation should check if > > SELinux is enabled during the system sanity checks. > > I agree. When installing oscar packages there is an selinux package > option. It is not installed by default and I have not chosen it. The > mere fact that the package exists led me to believe the selinux demons > had been exorcized. > > > Can you check the output for this? (and make sure it's *not* non-zero) > > [EMAIL PROTECTED] oscar-5.1]# > > $OSCAR_HOME/scripts/system-sanity.d/selinux-check.pl; echo > > $? > > 0 > > > If SELinux is enabled, you can disable it in /etc/selinuxconfig. > > The SELinux enforcement policies are known to interfere with the OSCAR > > installation and imaging process. > > It is actually /etc/selinux/config. It is disabled. > > How would I force the setting on the client node? Push out > /etc/selinux/config or /boot/grub.conf from /opt/sync_files or > /var/lib/systemimager/overrides? > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Oscar-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/oscar-devel > > ------------------------------------------------------------------------- > This SF.Net email is sponsored by the Moblin Your Move Developer's > challenge > Build the coolest Linux based applications with Moblin SDK & win great > prizes > Grand prize is a trip for two to an Open Source event anywhere in the world > http://moblin-contest.org/redirect.php?banner_id=100&url=/ > _______________________________________________ > Oscar-devel mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/oscar-devel > ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Oscar-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/oscar-devel ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Oscar-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/oscar-devel
