Change request: SELinux tweaks.

2008-11-21 Thread Luke Macken
Attached are some patches that will fix many AVC's that are currently happening within our infrastructure. Patch 0010-Fix-our-semanage_fcontext-function-to-work-on-symlin.patch /should/ fix the problem introduced in 41acfbc83c80d12d915a0d6087e841aba2c7e78c that caused restorecon to flip out when t

Re: Change request: SELinux tweaks.

2008-11-21 Thread Mike McGrath
On Fri, 21 Nov 2008, Luke Macken wrote: > Attached are some patches that will fix many AVC's that are currently > happening within our infrastructure. > > Patch 0010-Fix-our-semanage_fcontext-function-to-work-on-symlin.patch > /should/ fix the problem introduced in > 41acfbc83c80d12d915a0d6087e841

Re: Change request: SELinux tweaks.

2008-11-21 Thread Luke Macken
On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: > On Fri, 21 Nov 2008, Luke Macken wrote: > > > Attached are some patches that will fix many AVC's that are currently > > happening within our infrastructure. > > > > Patch 0010-Fix-our-semanage_fcontext-function-to-work-on-symlin.patch

Re: Change request: SELinux tweaks.

2008-11-21 Thread Toshio Kuratomi
Luke Macken wrote: > On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: >> On Fri, 21 Nov 2008, Luke Macken wrote: >> >>> Attached are some patches that will fix many AVC's that are currently >>> happening within our infrastructure. >>> >>> Patch 0010-Fix-our-semanage_fcontext-function-t

Re: Change request: SELinux tweaks.

2008-11-21 Thread Luke Macken
On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote: > Luke Macken wrote: > > On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: > >> On Fri, 21 Nov 2008, Luke Macken wrote: > >> > >>> Attached are some patches that will fix many AVC's that are currently > >>> happening withi

Re: Change request: SELinux tweaks.

2008-11-26 Thread Nils Philippsen
On Fri, 2008-11-21 at 16:49 -0500, Luke Macken wrote: > On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote: > > Luke Macken wrote: > > > On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: > > >> On Fri, 21 Nov 2008, Luke Macken wrote: > > >> > > >>> Attached are some patches

Re: Change request: SELinux tweaks.

2008-12-01 Thread Luke Macken
On Wed, Nov 26, 2008 at 12:55:28PM +0100, Nils Philippsen wrote: > On Fri, 2008-11-21 at 16:49 -0500, Luke Macken wrote: > > On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote: > > > Luke Macken wrote: > > > > On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: > > > >> On Fr

Re: Change request: SELinux tweaks.

2008-12-01 Thread Mike McGrath
On Mon, 1 Dec 2008, Luke Macken wrote: > On Wed, Nov 26, 2008 at 12:55:28PM +0100, Nils Philippsen wrote: > > On Fri, 2008-11-21 at 16:49 -0500, Luke Macken wrote: > > > On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote: > > > > Luke Macken wrote: > > > > > On Fri, Nov 21, 2008 at 02

Re: Change request: SELinux tweaks.

2008-12-01 Thread Todd Zullinger
Mike McGrath wrote: > On Mon, 1 Dec 2008, Luke Macken wrote: >> Yes, it's a nasty hack, but it works for now until puppet can >> handle this stuff better (the latest version may actually be able >> to, I'm not quite sure) I don't know that puppet-0.24.6 handles that. It can set and restore labels