Re: [Spacewalk-devel] Selinux Temporarily Disabled in Devel Repo

2009-07-22 Thread Jan Pazdziora
On Tue, Jul 21, 2009 at 05:33:51PM -0300, Devan Goodwin wrote:
 
  On Mon, Jul 20, 2009 at 03:53:14PM -0300, Devan Goodwin wrote:
   
   We've got both selinux build problems for Fedora 11, as well as
   selinux denials post install on at least el5. As such I've
   temporarily disabled
  
  What are the AVC denials on EL 5? I'm aware of the build problems
  
 
 Now filed here:
 
 https://bugzilla.redhat.com/show_bug.cgi?id=513071
 
 Happened on CentOS 5.2.

As it turns out to be user error and not a bug in the code, could you
please revert the commit which commented out the Requires of *-selinux
packages, and just put in a check for 0%{?fedora} == 11, similar to
spacewalk-monitoring.spec?

That way we still have *-selinux packages installed and hopefully
tested on F10 and EL5. As Spacewalk 0.5 worked with SELinux in
Enforcing on those two OSes, we should try not to introduce
regressions, and keeping the modules in the transaction seems like the
best way to achieve that.

Thank you,

-- 
Jan Pazdziora
Senior Software Engineer, Satellite Engineering, Red Hat

___
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel


Re: [Spacewalk-devel] Selinux Temporarily Disabled in Devel Repo

2009-07-22 Thread Devan Goodwin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, 22 Jul 2009 15:00:28 +0200
Jan Pazdziora jpazdzi...@redhat.com wrote:

 On Tue, Jul 21, 2009 at 05:33:51PM -0300, Devan Goodwin wrote:
  
   On Mon, Jul 20, 2009 at 03:53:14PM -0300, Devan Goodwin wrote:

We've got both selinux build problems for Fedora 11, as well as
selinux denials post install on at least el5. As such I've
temporarily disabled
   
   What are the AVC denials on EL 5? I'm aware of the build problems
   
  
  Now filed here:
  
  https://bugzilla.redhat.com/show_bug.cgi?id=513071
  
  Happened on CentOS 5.2.
 
 As it turns out to be user error and not a bug in the code, could you
 please revert the commit which commented out the Requires of *-selinux
 packages, and just put in a check for 0%{?fedora} == 11, similar to
 spacewalk-monitoring.spec?
 
 That way we still have *-selinux packages installed and hopefully
 tested on F10 and EL5. As Spacewalk 0.5 worked with SELinux in
 Enforcing on those two OSes, we should try not to introduce
 regressions, and keeping the modules in the transaction seems like the
 best way to achieve that.
 
 Thank you,
 

Sure.

- -- 
  Devan Goodwin dgood...@redhat.com
  Software Engineer Spacewalk / RHN Satellite
  Halifax, Canada   650.567.9039x79267
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAkpnEg8ACgkQAyHWaPV9my7Z2gCfVrBnEU9biKq2z6MLg0KvMuDG
PZsAn3RkxfO1mZqhb6ueN//hMrA02ABH
=EuH3
-END PGP SIGNATURE-

___
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel


Re: [Spacewalk-devel] Selinux Temporarily Disabled in Devel Repo

2009-07-21 Thread Jan Pazdziora
On Mon, Jul 20, 2009 at 03:53:14PM -0300, Devan Goodwin wrote:
 
 We've got both selinux build problems for Fedora 11, as well as selinux
 denials post install on at least el5. As such I've temporarily disabled

What are the AVC denials on EL 5? I'm aware of the build problems
on F11 but EL 5 should be clean. Do you have a bugzilla number?

-- 
Jan Pazdziora | adelton at #satellite*, #brno
Satellite Engineering, Red Hat

___
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel


Re: [Spacewalk-devel] Selinux Temporarily Disabled in Devel Repo

2009-07-21 Thread Devan Goodwin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 21 Jul 2009 21:33:56 +0200
Jan Pazdziora jpazdzi...@redhat.com wrote:

 On Mon, Jul 20, 2009 at 03:53:14PM -0300, Devan Goodwin wrote:
  
  We've got both selinux build problems for Fedora 11, as well as
  selinux denials post install on at least el5. As such I've
  temporarily disabled
 
 What are the AVC denials on EL 5? I'm aware of the build problems
 on F11 but EL 5 should be clean. Do you have a bugzilla number?
 

Now filed here:

https://bugzilla.redhat.com/show_bug.cgi?id=513071

Happened on CentOS 5.2.

Cheers,

Devan

- -- 
  Devan Goodwin dgood...@redhat.com
  Software Engineer Spacewalk / RHN Satellite
  Halifax, Canada   650.567.9039x79267
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAkpmJjQACgkQAyHWaPV9my62FgCeL0stMwOINMoVhAXphKj7mGbZ
+0wAoLSNVNaKsj4IlV8sHkTEyQnR/1E0
=d9Mv
-END PGP SIGNATURE-

___
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel


[Spacewalk-devel] Selinux Temporarily Disabled in Devel Repo

2009-07-20 Thread Devan Goodwin
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

We've got both selinux build problems for Fedora 11, as well as selinux
denials post install on at least el5. As such I've temporarily disabled
selinux in the top level spacewalk meta-package, we will restore it as
soon as we can get someone to work on the problems.

If you want to manually install the selinux packages as they are now,
yum install what was commented out in this commit:

http://git.fedorahosted.org/git/?p=spacewalk.git;a=commitdiff;h=34124fc9516ad179c88d504c4554af169a9c388d

Cheers,

Devan

- -- 
  Devan Goodwin dgood...@redhat.com
  Software Engineer Spacewalk / RHN Satellite
  Halifax, Canada   650.567.9039x79267
-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.11 (GNU/Linux)

iEYEARECAAYFAkpkvR4ACgkQAyHWaPV9my5u1ACeJf0boWVn42Sqqq+dfnnHYSAd
OQEAn1GWKhC1rRmiCcMcE+X8uPry0J+J
=0E2J
-END PGP SIGNATURE-

___
Spacewalk-devel mailing list
Spacewalk-devel@redhat.com
https://www.redhat.com/mailman/listinfo/spacewalk-devel