SELinux & Koji question
Richard W.M. Jones
rjones at redhat.com
Tue Sep 25 16:38:30 UTC 2012
On Tue, Sep 25, 2012 at 10:35:43AM -0600, Kevin Fenzi wrote:
> On Tue, 25 Sep 2012 17:29:39 +0100
> "Richard W.M. Jones" <rjones at redhat.com> wrote:
> > This command fails:
> > + chcon system_u:object_r:tmp_t:s0 tmp
> > chcon: failed to change context of 'tmp' to
> > 'system_u:object_r:tmp_t:s0': Operation not permitted
> > when run on Koji. However it works fine when run on a Fedora 18
> > machine, with SELinux enforcing.
> > Does Koji have SELinux enforcing? Why is labelling not allowed when
> > it works on a local machine?
> No, builders have selinux disabled, as running in permissive mode a
> while back caused odd build failures. ;(
> It may be that it works fine now, but we would need to test that and
> confirm before changing anything.
Ah, I guess that explains it!
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
libguestfs lets you edit virtual machines. Supports shell scripting,
bindings from many languages. http://libguestfs.org
More information about the devel