On Sun, Nov 28, 2010 at 17:57, Robert G. (Doc) Savage <[email protected]> wrote: > On Sun, 2010-11-28 at 16:44 -0800, Akemi Yagi wrote: >> On Sun, Nov 28, 2010 at 4:01 PM, Robert G. (Doc) Savage >> <[email protected]> wrote: >> >> > That may have been it. At least most of it. I did have selinux set to >> > permissive, and the CentOS-plus kernel installation must have quietly >> > set it back to enforcing. Not nice. >> >> You are mistaken here :( >> >> The centosplus kernel has certain features enabled (such as network >> drivers and filesystems) as well as added patches. But it should/would >> not touch things like selinux setup. Your trouble coinceded with the >> installation of the cplus kernel (it involved rebooting of the >> system). > > Akemi, > > If this is so, shouldn't I have been able to back out cleanly?
No. If something else changed the status of the system from enforcing to permissive your backing out would have had no effect. Permissive to enforcing is done in 1 of 2 places. 1) The grub command line. The environment variable here is setup from previous entries or in various /etc/sysconfig files. 2) The file /etc/selinux/config Installing and removing a kernel only changes new entries in /etc/grub.conf and not old ones so if there was a command line entry for selinux it would have been done by hand or another script. It does not affect /etc/selinux/config. So if the change was done in /etc/selinux/config it was done by some other tool. Looking through the %post of the centos kernel I don't see where it would change other lines in /etc/grub.conf At this point, all I can say is something changed your system from permissive to enforcing but it does not look like it was the RPM. > --Doc Savage > Fairview Heights, IL > > _______________________________________________ > rhelv5-list mailing list > [email protected] > https://www.redhat.com/mailman/listinfo/rhelv5-list > -- Stephen J Smoogen. "The core skill of innovators is error recovery, not failure avoidance." Randy Nelson, President of Pixar University. "Let us be kind, one to another, for most of us are fighting a hard battle." -- Ian MacLaren _______________________________________________ rhelv5-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhelv5-list
