SELinux & Koji question

[Richard W.M. Jones]

On Tue, Sep 25, 2012 at 10:35:43AM -0600, Kevin Fenzi wrote:
> On Tue, 25 Sep 2012 17:29:39 +0100
> "Richard W.M. Jones" <rjones at redhat.com> wrote:
> 
> > 
> > This command fails:
> > 
> > + chcon system_u:object_r:tmp_t:s0 tmp
> > chcon: failed to change context of 'tmp' to
> > 'system_u:object_r:tmp_t:s0': Operation not permitted
> > 
> > when run on Koji.  However it works fine when run on a Fedora 18
> > machine, with SELinux enforcing.
> > 
> > Does Koji have SELinux enforcing?  Why is labelling not allowed when
> > it works on a local machine?
> 
> No, builders have selinux disabled, as running in permissive mode a
> while back caused odd build failures. ;( 
> 
> It may be that it works fine now, but we would need to test that and
> confirm before changing anything. 

Ah, I guess that explains it!

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
libguestfs lets you edit virtual machines.  Supports shell scripting,
bindings from many languages.  http://libguestfs.org