Fedora 14 NTP and SELinux

[Adam Williamson]

On Mon, 2010-11-29 at 09:27 -0500, James Laska wrote:
> On Mon, 2010-11-29 at 11:35 +0530, Rahul Sundaram wrote:
> > Hi
> > 
> > Read a couple of reviews and blog posts mentioning this,  if you use ntp
> > via firstboot in Fedora 14 and you login, you get SELinux warnings on
> > login.  I tried testing this in a vm and this is very much reproducible
> > and is such a jarring user experience.  
> 
> > What can we do to avoid these class of problems for the next release?
> 
> At release time, the criteria [1] are written to include experiences
> like this.
> 
>         "In most cases, there must be no SELinux 'AVC: denied' messages
>         or abrt crash notifications on initial boot and subsequent login
>         (see Blocker_Bug_FAQ)"
> 
> The gap here is that we don't spell out all configuration options in
> firstboot and whether they should result in a clean login experience.
> For something like the issue you mention, it would make a good
> discussion topic as to whether it represents a valid release blocker.  I
> can see arguments for both sides.  
> 
> Another gap is that we don't actively test/explore all firstboot
> configuration options and their impact on setroubleshoot.

I've been tracking the same issue and I recently added it to the
retrospective. We can probably broaden out the relevant test case:

https://fedoraproject.org/wiki/QA:Testcase_desktop_error_checks
-- 
Adam Williamson
Fedora QA Community Monkey
IRC: adamw | Fedora Talk: adamwill AT fedoraproject DOT org
http://www.happyassassin.net