[Fedora-livecd-list] Re: Unnecessary SELinux Failure Condition?

[Jay Greguske]

Jay Greguske wrote:
> Jeremy Katz wrote:
>   
>> On Fri, Sep 25, 2009 at 8:59 AM, Jay Greguske <jgregusk at redhat.com> wrote:
>>   
>>     
>>> Jeremy Katz wrote:
>>>     
>>>       
>>>> There have been some problems more recently with the booleans stuff if
>>>> SELinux isn't enabled.  Does that all end up working correctly still?
>>>>
>>>>       
>>>>         
>>> I'll look into it. Are there any you have in mind specifically?
>>>     
>>>       
>> Dan might remember better than I -- I vaguely remember that a lot of
>> the home directory bits and also some of the xguest stuff requires
>> working booleans
>>
>> - Jeremy
>>   
>>     
> I installed xguest to a running livecd (desktop ks file) and played with
> two booleans related to it: browser_write_xguest_data, and
> xguest_connect_network. With the former turned off the Guest account
> could not download files from random internet sites, and with the latter
> it couldn't connect at all, so I'd say they were functioning as
> expected. I'm pretty confident SELinux booleans are working correctly
> with these changes. If you have other tests to suggest I'd be happy to
> try them out.
>
> Thanks,
> - Jay
>
> --
> Fedora-livecd-list mailing list
> Fedora-livecd-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-livecd-list
>
>   
Is there anything more I can do to scoot these changes along? I don't
want them to fall off radar...

- Jay
-------------- next part --------------
A non-text attachment was scrubbed...
Name: remove-unnecessary-selinux-check.patch
Type: text/x-patch
Size: 2972 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/livecd/attachments/20091022/6039d4e6/attachment.bin