Re: mach/mock and selinux

[seth vidal <skvidal phy duke edu>]

On Sat, 2005-05-21 at 07:34 +0900, Jens Petersen wrote:
> > On Fri, 2005-05-20 at 15:51 +0900, Jens Petersen wrote:
> >>
> >>http://linux.duke.edu/~skvidal/mock/
> >>
> >>Thanks.  I tried it and got to:
> >>
> >>$ mock -r fedora-3-i386-core mock-0.1-1.src.rpm
> ::
> >>Non-zero return value 127 on executing /usr/sbin/mock-helper chroot 
> >>/var/lib/mock//fedora-3-i386-core/root /sbin/runuser - root -c 
> >>"/usr/sbin/useradd -u 500 -d /builddir mockbuild"
> 
> Ok I haven't tested, but apparently this is caused by using selinux,
> which presumably also explains the problem I was seeing
> earlier with mach.
> 
> (Still with selinux being on by default since fc3, this really
> needs some attention.)
> 

I could make the first command mock runs be 'setenforce 0' :) but I
think that would be wrong.

essentially we need unlimited write access to the /var/lib/mock
I'm betting all I need to do is figure out how to use the selinux
extensions/parts that are there from mach-helper.

just not this weekend!
-sv