Selinux file context for tftpboot

[Robert L Cochran]

When I run `cobbler check` I get these complaints:

[root@deafeng3 cobbler]# cobbler check
/usr/lib64/python2.6/site-packages/Cheetah/CacheRegion.py:30: 
DeprecationWarning: the md5 module is deprecated; use hashlib instead
   import md5
The following potential problems were detected:
#0: you need to set some SELinux content rules to ensure cobbler works 
correctly in your SELinux environment, run the following: 
/usr/sbin/semanage fcontext -a -t public_content_t "/tftpboot/.*"
#1: since iptables may be running, ensure 69, 80, and 25151 are unblocked
#2: fencing tools were not found, and are required to use the (optional) 
power management features. install cman to use them


I've tried several times to adjust the file context for tftpboot and get 
this answer back from semanage:

[root@deafeng3 cobbler]# /usr/sbin/semanage fcontext -a -t 
public_content_t "/tftpboot/.*"
/usr/sbin/semanage: File context for /tftpboot/.* already defined

Any advice appreciated. I need to install Fedora 11 on two (2) Toshiba 
Satellite 1905-S301 laptops, on brand new hard drives, and this seems a 
good chance to have Cobbler do it for me.

Bob

[James Cammarata]

On Sun, 28 Jun 2009 11:14:09 -0400, Robert L Cochran
<cochranb(a)speakeasy.net&gt; wrote:
>  When I run `cobbler check` I get these complaints:
>  
>  [root@deafeng3 cobbler]# cobbler check
>  /usr/lib64/python2.6/site-packages/Cheetah/CacheRegion.py:30: 
>  DeprecationWarning: the md5 module is deprecated; use hashlib instead
>     import md5
>  The following potential problems were detected:
>  #0: you need to set some SELinux content rules to ensure cobbler works 
>  correctly in your SELinux environment, run the following: 
>  /usr/sbin/semanage fcontext -a -t public_content_t "/tftpboot/.*"
>  #1: since iptables may be running, ensure 69, 80, and 25151 are unblocked
>  #2: fencing tools were not found, and are required to use the (optional) 
>  power management features. install cman to use them
>  
>  
>  I've tried several times to adjust the file context for tftpboot and get 
>  this answer back from semanage:
>  
>  [root@deafeng3 cobbler]# /usr/sbin/semanage fcontext -a -t 
>  public_content_t "/tftpboot/.*"
>  /usr/sbin/semanage: File context for /tftpboot/.* already defined
>  
>  Any advice appreciated. I need to install Fedora 11 on two (2) Toshiba 
>  Satellite 1905-S301 laptops, on brand new hard drives, and this seems a 
>  good chance to have Cobbler do it for me. 
I believe you're getting that message only because it detects you have
selinux enabled, not that it is required to fix something, just like it's
telling you to be sure you have the correct ports open in iptables because
it detects that it is running as well.

If you have no problems kickstarting, you can ignore that message.  If you
do have problems, let us know.

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

[Michael DeHaan]

Robert L Cochran wrote:
>  When I run `cobbler check` I get these complaints:
>
>  [root@deafeng3 cobbler]# cobbler check
>  /usr/lib64/python2.6/site-packages/Cheetah/CacheRegion.py:30: 
>  DeprecationWarning: the md5 module is deprecated; use hashlib instead
>     import md5
>  The following potential problems were detected:
>  #0: you need to set some SELinux content rules to ensure cobbler works 
>  correctly in your SELinux environment, run the following: 
>  /usr/sbin/semanage fcontext -a -t public_content_t "/tftpboot/.*"
>  #1: since iptables may be running, ensure 69, 80, and 25151 are unblocked
>  #2: fencing tools were not found, and are required to use the (optional) 
>  power management features. install cman to use them
>
>
>  I've tried several times to adjust the file context for tftpboot and get 
>  this answer back from semanage:
>
>  [root@deafeng3 cobbler]# /usr/sbin/semanage fcontext -a -t 
>  public_content_t "/tftpboot/.*"
>  /usr/sbin/semanage: File context for /tftpboot/.* already defined
>
>  Any advice appreciated. I need to install Fedora 11 on two (2) Toshiba 
>  Satellite 1905-S301 laptops, on brand new hard drives, and this seems a 
>  good chance to have Cobbler do it for me.
>
>  Bob
>     
What does SELinux say you have the context set to? It could either be 
that a context is already assigned or that the check to tell you to set 
it is not correct...
>  _______________________________________________
>  cobbler mailing list
>  cobbler(a)lists.fedorahosted.org
>  https://fedorahosted.org/mailman/listinfo/cobbler
>