[Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-10 Thread Jan Pazdziora
Hello, I've committed a couple more changes to the SELinux policy modules I've been working on, and they seem to give reasonable results now. You are welcome to change Permissive to Enforcing and give Spacewalk with SELinux a try. Some quotes from https://fedorahosted.org/spacewalk/wiki

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-10 Thread Mike McCune
Jan Pazdziora wrote: Hello, I've committed a couple more changes to the SELinux policy modules I've been working on, and they seem to give reasonable results now. You are welcome to change Permissive to Enforcing and give Spacewalk with SELinux a try. Some quotes from https://fedorahosted.org

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-16 Thread Mike McCune
Mike McCune wrote: Jan Pazdziora wrote: Hello, I've committed a couple more changes to the SELinux policy modules I've been working on, and they seem to give reasonable results now. You are welcome to change Permissive to Enforcing and give Spacewalk with SELinux a try. Some quotes from http

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-16 Thread Jan Pazdziora
On Tue, Dec 16, 2008 at 01:39:02PM -0800, Mike McCune wrote: > Mike McCune wrote: >> Jan Pazdziora wrote: >>> Hello, >>> >>> I've committed a couple more changes to the SELinux policy modules >>> I've been working on, and they seem to give reasonable results now. >>> You are welcome to change Permi

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-16 Thread Michael DeHaan
I don't have selinux on. Is this expected? it took almost 10 minutes and I eventually just CTRL+C-ed it. Well yes, we run restorecon on /var/satellite to set correct context, even if you are not in Enforcing. It is not expected to fail thou. Also calling restorecon with selinux dis

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-16 Thread Mike McCune
Jan Pazdziora wrote: On Tue, Dec 16, 2008 at 01:39:02PM -0800, Mike McCune wrote: Mike McCune wrote: Jan Pazdziora wrote: Hello, I've committed a couple more changes to the SELinux policy modules I've been working on, and they seem to give reasonable results now. You are welcome to change Per

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-17 Thread Michael DeHaan
Well, we could check sestatus for disabled. FWIW, a bit easier: /usr/sbin/selinuxenabled returns 0 if enabled. Just found out about that recently :) ___ Spacewalk-devel mailing list Spacewalk-devel@redhat.com https://www.redhat.com/mailman/lis

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-17 Thread Jan Pazdziora
On Tue, Dec 16, 2008 at 07:28:17PM -0500, Michael DeHaan wrote: > >> Well yes, we run restorecon on /var/satellite to set correct context, >> even if you are not in Enforcing. It is not expected to fail thou. > > Also calling restorecon with selinux disabled probably won't work. Well, we co

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-17 Thread Dennis Gilmore
On Wednesday 17 December 2008 02:43:49 pm Michael DeHaan wrote: > > Well, we could check sestatus for disabled. > > FWIW, a bit easier: /usr/sbin/selinuxenabled returns 0 if enabled. > > Just found out about that recently :) or /usr/sbin/getenforce will tell you if its in enforcing, permissive or

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2008-12-18 Thread Michael DeHaan
Dennis Gilmore wrote: On Wednesday 17 December 2008 02:43:49 pm Michael DeHaan wrote: Well, we could check sestatus for disabled. FWIW, a bit easier: /usr/sbin/selinuxenabled returns 0 if enabled. Just found out about that recently :) or /usr/sbin/getenforce will tell you if i

Re: [Spacewalk-devel] Spacewalk and SELinux: progress status

2009-01-08 Thread Jan Pazdziora
On Tue, Dec 16, 2008 at 07:39:37PM -0800, Mike McCune wrote: > Jan Pazdziora wrote: >>> So I'm testing the latest spacewalk-setup on a box that already had a >>> manually upgraded 0.4 on it and got pages and pages of: >>> >>> /sbin/restorecon set context >>> /var/satellite/redhat/1/f34/gnumeri