Issue #8714 has been updated by Sean Millichamp.
Hmm, interesting. I haven't looked into it at all yet, but my initial reaction is that Ioannis is correct and that we should be operating on the link itself (if it is a link) and here is why: You have to tell Puppet if a file is a link or not, so that awareness is already there. I will hopefully have some time in the next couple of days to look into this so I'll dig into it a bit and update with my findings. ---------------------------------------- Bug #8714: Changing SELinux contexts on symlinks requires the '-h' parameter in chcon https://projects.puppetlabs.com/issues/8714 Author: Ioannis Aslanidis Status: Needs Decision Priority: Normal Assignee: Sean Millichamp Category: SELinux Target version: Affected Puppet version: 2.6.9 Keywords: Branch: There is a problem when trying to chance SELinux contexts through puppet. Looks like puppet does not call **chcon** with the **-h** parameter. # ls -ald /home/file/test lrwxrwxrwx 1 root root 20 Aug 1 12:23 /home/file/test -> /mnt/file/test # chcon -v -t user_home_t test failed to change context of test to system_u:object_r:user_home_t chcon: failed to change context of test to system_u:object_r:user_home_t: Operation not supported # chcon -v -h -t user_home_t test context of /home/file/test changed to system_u:object_r:user_home_t This results in puppet trying to change the SELinux contexts on every run without success and without knowing that it actually failed. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
