Re: [CentOS] selinux getsebool request

2016-04-13 Thread John Jasen
re: puppet selboolean And ... a double d'oh! for the day. That's just what I was looking for! Thanks for pointing it out! ___ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos

Re: [CentOS] selinux getsebool request

2016-04-13 Thread Fabian Arrotin
On 12/04/16 19:10, John Jasen wrote: > Out of faint curiosity, how do we push change requests upstream to RHEL? > > I'm using puppet to automate systems, including the application of > SELinux policy. While setsebool -P is non-damaging to repeat, it is time > consuming -- taking about 45 seconds p

Re: [CentOS] selinux getsebool request

2016-04-13 Thread James Hogarth
On 13 April 2016 at 09:50, John Hodrien wrote: > On Tue, 12 Apr 2016, John Jasen wrote: > > On 04/12/2016 02:31 PM, James Hogarth wrote: >> >>> For example: >>> >>> unless => "/usr/sbin/getsebool httpd_can_network_connect | /usr/bin/grep >>> on >>> &> /dev/null" >>> >> >> D'oh! That's what I get

Re: [CentOS] selinux getsebool request

2016-04-13 Thread John Hodrien
On Tue, 12 Apr 2016, John Jasen wrote: On 04/12/2016 02:31 PM, James Hogarth wrote: For example: unless => "/usr/sbin/getsebool httpd_can_network_connect | /usr/bin/grep on &> /dev/null" D'oh! That's what I get for overcomplicating the whole darn thing. :) Incidentally one nice trick if yo

Re: [CentOS] selinux getsebool request

2016-04-12 Thread John Jasen
On 04/12/2016 02:31 PM, James Hogarth wrote: > For example: > > unless => "/usr/sbin/getsebool httpd_can_network_connect | /usr/bin/grep on > &> /dev/null" D'oh! That's what I get for overcomplicating the whole darn thing. :) > > Incidentally one nice trick if you're dealing with potentially chang

Re: [CentOS] selinux getsebool request

2016-04-12 Thread James Hogarth
On 12 Apr 2016 6:10 p.m., "John Jasen" wrote: > > Out of faint curiosity, how do we push change requests upstream to RHEL? > > I'm using puppet to automate systems, including the application of > SELinux policy. While setsebool -P is non-damaging to repeat, it is time > consuming -- taking about 4

[CentOS] selinux getsebool request

2016-04-12 Thread John Jasen
Out of faint curiosity, how do we push change requests upstream to RHEL? I'm using puppet to automate systems, including the application of SELinux policy. While setsebool -P is non-damaging to repeat, it is time consuming -- taking about 45 seconds per execution to process the existing policy and