Fedora 14 NTP and SELinux

James Laska jlaska at redhat.com
Mon Nov 29 14:27:56 UTC 2010


On Mon, 2010-11-29 at 11:35 +0530, Rahul Sundaram wrote:
> Hi
> 
> Read a couple of reviews and blog posts mentioning this,  if you use ntp
> via firstboot in Fedora 14 and you login, you get SELinux warnings on
> login.  I tried testing this in a vm and this is very much reproducible
> and is such a jarring user experience.  

> What can we do to avoid these class of problems for the next release?

At release time, the criteria [1] are written to include experiences
like this.

        "In most cases, there must be no SELinux 'AVC: denied' messages
        or abrt crash notifications on initial boot and subsequent login
        (see Blocker_Bug_FAQ)"

The gap here is that we don't spell out all configuration options in
firstboot and whether they should result in a clean login experience.
For something like the issue you mention, it would make a good
discussion topic as to whether it represents a valid release blocker.  I
can see arguments for both sides.  

Another gap is that we don't actively test/explore all firstboot
configuration options and their impact on setroubleshoot.

Thanks,
James

[1] http://fedoraproject.org/wiki/Fedora_14_Final_Release_Criteria
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/test/attachments/20101129/26cedca1/attachment.bin 


More information about the test mailing list