Re: Mock/Pungi and selinux for building re-spins in f11

2009-10-08 Thread Mike Cloaked
Daniel J Walsh wrote: Could someone send me a list of AVC's. Is this the same problem that livecd has? Building a different OS, causes it's policy to be loaded during the install. We should be able to convince the Mock environment that SELinux is disabled, and then allow mock the

Re: Mock/Pungi and selinux for building re-spins in f11

2009-10-07 Thread Julian Aloofi
Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works

Re: Mock/Pungi and selinux for building re-spins in f11

2009-10-07 Thread Daniel J Walsh
On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of

Re: Mock/Pungi and selinux for building re-spins in f11

2009-10-07 Thread Mike Cloaked
Daniel J Walsh wrote: On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now

Re: Mock/Pungi and selinux for building re-spins in f11

2009-10-07 Thread Daniel J Walsh
On 10/07/2009 01:51 PM, Mike Cloaked wrote: Daniel J Walsh wrote: On 10/07/2009 08:42 AM, Julian Aloofi wrote: Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in

Mock/Pungi and selinux for building re-spins in f11

2009-10-06 Thread Mike Cloaked
Does anyone know if it is still current practice to set SELinux to permissive before doing a spin re-build in mock/pungi in F11? Or has selinux policy now reached the point of refinement such that running a respin build works fine with selinux enforcing? Would be useful to know - I have not