Fedora 20 TC2 AMIs

Daniel J Walsh dwalsh at redhat.com
Thu Nov 21 17:58:22 UTC 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 11/21/2013 11:19 AM, Dennis Gilmore wrote:
> We don't use anaconda to make the images. We use appliance-creator which is
> part of appliance-tools. I'm the upstream for them.
> 
Is the appliance-tools running restorecon -R -v / in the end like
livecd-creator used to?

anaconda has a list of files/directories that it runs restorecon on after the
install is done.  The idea is to fix labels of content that was created before
selinux policy was loaded into the kernel.  If these are the only two files
that are mislabeled, then I would just run restorecon on them.
> Daniel J Walsh <dwalsh at redhat.com> wrote:
> 
> On 11/21/2013 07:30 AM, Vitaly Kuznetsov wrote:
> 
> Dennis Gilmore <dennis at ausil.us> writes:
> 
> Hi all,
> 
> Final TC2 images have been uploaded to EC2 and are available at
> 
> ami-3392b55a : us-east-1 image for i386 ami-f794b39e : us-east-1 image for
> x86_64
> 
> 
> I ran basic tests agains them and they're ok. The only issue I still see
> is wrong SELinux context for several files:
> 
> # restorecon -Rvn -e/dev -e/proc -e/sys -e/run -e/tmp/ / restorecon reset 
> /var/cache/yum context 
> system_u:object_r:file_t:s0->system_u:object_r:rpm_var_cache_t:s0 
> restorecon reset /var/log/boot.log context 
> system_u:object_r:var_log_t:s0->system_u:object_r:plymouthd_var_log_t:s0 
> restorecon reset /boot/extlinux/ldlinux.sys context 
> system_u:object_r:file_t:s0->system_u:object_r:boot_t:s0
> 
> These should be opened as a bug in anaconda. (The file_t ones anyways.)
> 
> 
> -- Sent from my Android device with K-9 Mail. Please excuse my brevity.
> 
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlKOSb4ACgkQrlYvE4MpobPBUACgsHbZ6R6ie+Co0m2STvpD73Xx
HRMAoLZ604yqAErwiW4m7rhLWa0JuadR
=2+91
-----END PGP SIGNATURE-----


More information about the devel mailing list