Re: Mock/Pungi and selinux for building re-spins in f11
Daniel J Walsh wrote: Could someone send me a list of AVC's. Is this the same problem that livecd has? Building a different OS, causes it's policy to be loaded during the install. We should be able to convince the Mock environment that SELinux is disabled, and then allow mock the ability to put down the labels like we do with livecd. Dan, I'll try and do a test build in the next couple of days, and post AVCs if they pop up - would it be best to do this in a BZ report, rather than to Fedora list? If so which component? selinux or mock/pungi? Open up one bug on mock/pungi with me cc'd and we can fix it. Since I think most of the changes have to be made in Mock to fake SELinux into thinking it is disabled or a fake /selinux like livecd has. I set up mock/pungi and ran a test build to create an install i386 iso with a slightly modified kickstart file - I had to restart it when it initially failed (not selinux related at all) but then it executed without any apparent errors, and produced the iso files and no AVC popped up at all! This is on a machine with selinux set to enforcing ... So now I am left wondering if there is no problem at all with the iso - or whether it would give selinux related problems if it was used for an install on a real machine!Certainly there is no basis on which to put in a Bugzilla report... -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25802992.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Mock/Pungi and selinux for building re-spins in f11
Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not done respin builds since F10 so I am a little out of touch with current practice. Thanks in advance. -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html Sent from the Fedora List mailing list archive at Nabble.com. Yes, that's still required to successfully build a re-spin in pungi and revisor if I remember correctly. signature.asc Description: Dies ist ein digital signierter Nachrichtenteil -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Mock/Pungi and selinux for building re-spins in f11
On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not done respin builds since F10 so I am a little out of touch with current practice. Thanks in advance. -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html Sent from the Fedora List mailing list archive at Nabble.com. Yes, that's still required to successfully build a re-spin in pungi and revisor if I remember correctly. Could someone send me a list of AVC's. Is this the same problem that livecd has? Building a different OS, causes it's policy to be loaded during the install. We should be able to convince the Mock environment that SELinux is disabled, and then allow mock the ability to put down the labels like we do with livecd. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Mock/Pungi and selinux for building re-spins in f11
Daniel J Walsh wrote: On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not done respin builds since F10 so I am a little out of touch with current practice. Thanks in advance. -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html Sent from the Fedora List mailing list archive at Nabble.com. Yes, that's still required to successfully build a re-spin in pungi and revisor if I remember correctly. Could someone send me a list of AVC's. Is this the same problem that livecd has? Building a different OS, causes it's policy to be loaded during the install. We should be able to convince the Mock environment that SELinux is disabled, and then allow mock the ability to put down the labels like we do with livecd. Dan, I'll try and do a test build in the next couple of days, and post AVCs if they pop up - would it be best to do this in a BZ report, rather than to Fedora list? If so which component? selinux or mock/pungi? -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25791306.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Mock/Pungi and selinux for building re-spins in f11
On 10/07/2009 01:51 PM, Mike Cloaked wrote: Daniel J Walsh wrote: On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not done respin builds since F10 so I am a little out of touch with current practice. Thanks in advance. -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html Sent from the Fedora List mailing list archive at Nabble.com. Yes, that's still required to successfully build a re-spin in pungi and revisor if I remember correctly. Could someone send me a list of AVC's. Is this the same problem that livecd has? Building a different OS, causes it's policy to be loaded during the install. We should be able to convince the Mock environment that SELinux is disabled, and then allow mock the ability to put down the labels like we do with livecd. Dan, I'll try and do a test build in the next couple of days, and post AVCs if they pop up - would it be best to do this in a BZ report, rather than to Fedora list? If so which component? selinux or mock/pungi? Open up one bug on mock/pungi with me cc'd and we can fix it. Since I think most of the changes have to be made in Mock to fake SELinux into thinking it is disabled or a fake /selinux like livecd has. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Mock/Pungi and selinux for building re-spins in f11
Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not done respin builds since F10 so I am a little out of touch with current practice. Thanks in advance. -- View this message in context: http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
