On Fri, 2008-09-05 at 11:02 -0400, Mcdaid, Paul (GAL:IE319) wrote: > Hi Scott, > > Thanks for looking at the patch. I agree with all of your comments. I'll > start working on making these changes today. > > >Can we install the policy regardless of the state of SElinux? If so, > that seems good to me. > > I had an issue in the case of where the sipxecs policy was loaded > before selinux was enabled and the system was rebooted in order to > relabel all of the files. The boot up would fail during "checking file > systems" and would drop me into a maintenance shell. I looked into this > today and found more SELinux policy rules that I needed to add. I've now > verified that the sipxecs SElinux policy can be loaded regardless of the > state of SELinux or if a relabel needs to occur after a reboot.
Good - I figured there had to be a way. > I've another change to make as well, and that is to change the login > directory of sipxchange from /etc/sipxpbx to: /home/sipxchange. This is > needed as loading any SELinux policy complains due to the fact that the > /etc directory is not accessible by sipxchange yet the /etc/sipxpbx > directory is. I've already covered this issue in previous devlist > discussions. Yes, I remember those. Make sure that when you do the home directory stuff that you use the SIPXPBXUSER variable, not a hardcoded name. _______________________________________________ sipx-dev mailing list [email protected] List Archive: http://list.sipfoundry.org/archive/sipx-dev Unsubscribe: http://list.sipfoundry.org/mailman/listinfo/sipx-dev
