On Sat, Nov 12, 2011 at 8:39 AM, Jörgen Maas <jorgen.m...@gmail.com> wrote:
> On Sat, Nov 12, 2011 at 2:51 PM, James Cammarata <j...@sngx.net> wrote:
> <snip>
>> or even better, audit2allow and update the selinux policy for
>> cobbler with a patch :)
>
> I can give it a try, i just cant figure out where the policy is
> defined in the cobbler repo???
> E.g. in what file?
Umm yeah I'm not sure :) I thought it was done in the spec but I'm
having trouble finding it myself.
I did enable selinux on my system, and I'm not having the issue you are:
# setenforce 1
# getenforce
Enforcing
# service cobblerd restart
Restarting cobblerd (via systemctl): [ OK ]
# service cobblerd status
cobblerd.service - LSB: daemon for libvirt virtualization API
Loaded: loaded (/etc/rc.d/init.d/cobblerd)
Active: active (running) since Sat, 12 Nov 2011 08:50:09 -0600; 4s ago
Process: 3534 ExecStop=/etc/rc.d/init.d/cobblerd stop
(code=exited, status=0/SUCCESS)
Process: 3544 ExecStart=/etc/rc.d/init.d/cobblerd start
(code=exited, status=0/SUCCESS)
Main PID: 3499 (code=killed, signal=TERM)
CGroup: name=systemd:/system/cobblerd.service
This is F15. I'm getting a lot of OTHER avc's, but nothing related to PAM:
#============= cobblerd_t ==============
allow cobblerd_t cobbler_tmp_t:file execute;
allow cobblerd_t self:capability { setuid audit_write };
allow cobblerd_t self:netlink_audit_socket { write nlmsg_relay create read };
allow cobblerd_t shadow_t:file { read getattr open };
allow cobblerd_t tmpfs_t:dir write;
#============= httpd_t ==============
allow httpd_t cobbler_port_t:tcp_socket name_connect; # there's a
boolean for this
allow httpd_t cobbler_var_lib_t:dir { write remove_name add_name };
allow httpd_t cobbler_var_lib_t:file { write rename create unlink };
For instance, I can't log out of the web because it's denying
permission to write to the sessions directory (I setenforce to 1 after
logging in).
_______________________________________________
cobbler-devel mailing list
cobbler-devel@lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cobbler-devel
