Issue #8714 has been updated by Daniel Pittman. Assignee deleted (Sean Millichamp) Branch changed from https://github.com/puppetlabs/puppet/pull/646 to https://github.com/puppetlabs/puppet/pull/1099
I rewrote the original patch as https://github.com/puppetlabs/puppet/pull/1099 - this cleans up the logic a bit more, and uses the "don't touch the filesystem, just manipulate the logical tree" features of Pathname a bit more heavily. This should be good to go. Sorry this got ignored for so long. :( ---------------------------------------- Bug #8714: Changing SELinux contexts on symlinks requires the '-h' parameter in chcon https://projects.puppetlabs.com/issues/8714#change-70252 Author: Ioannis Aslanidis Status: In Topic Branch Pending Review Priority: Normal Assignee: Category: SELinux Target version: Affected Puppet version: 2.6.13 Keywords: Branch: https://github.com/puppetlabs/puppet/pull/1099 There is a problem when trying to chance SELinux contexts through puppet. Looks like puppet does not call **chcon** with the **-h** parameter. # ls -ald /home/file/test lrwxrwxrwx 1 root root 20 Aug 1 12:23 /home/file/test -> /mnt/file/test # chcon -v -t user_home_t test failed to change context of test to system_u:object_r:user_home_t chcon: failed to change context of test to system_u:object_r:user_home_t: Operation not supported # chcon -v -h -t user_home_t test context of /home/file/test changed to system_u:object_r:user_home_t This results in puppet trying to change the SELinux contexts on every run without success and without knowing that it actually failed. -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://projects.puppetlabs.com/my/account -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/puppet-bugs?hl=en.
