[Spacewalk-list] SELinux contexts differ! Current context: None
James Hogarth
james.hogarth at gmail.com
Thu Dec 17 20:33:29 UTC 2009
long shot perhaps but might be worth a go....
try using the import part of the add files screen to import the file from
one of the hosts it's showing that message into a single system override and
then deploy/compare with that...
given the import it should be identical and if it passes that we can then
compare the resultant imported file versus what is in your central
configuration channel....
thoughts?
2009/12/17 Gerd Mueller <gerd.mueller at mikatiming.de>
> no, not even a blank
>
> Gerd
>
> --
> Gerd Mueller
>
> Mika Timing GmbH
> Strundepark
> Kuertener Str. 11b
> 51465 Bergisch Gladbach
>
> Phone: +49 (0)2202-2401-153
> Mobile: +49 (0)151 5500 4015
> Fax: +49 (0)2202-2401-253
> email: gerd.mueller at mikatiming.de
> WEB Adresse: www.mikatiming.de
>
> Key ID: 2AA04C1F
>
>
>
> Am Donnerstag, den 17.12.2009, 19:51 +0000 schrieb James Hogarth:
> > And no context information within the configuration channel for that
> > file?
> >
> > 2009/12/17 Gerd Mueller <gerd.mueller at mikatiming.de>
> > all of them show disabled (I check all of them at once with
> > cluster
> > ssh). But still 3 of them claim the context is different.
> >
> > Gerd
> >
> > --
> > Gerd Mueller
> >
> > Mika Timing GmbH
> > Strundepark
> > Kuertener Str. 11b
> > 51465 Bergisch Gladbach
> >
> > Phone: +49 (0)2202-2401-153
> > Mobile: +49 (0)151 5500 4015
> > Fax: +49 (0)2202-2401-253
> > email: gerd.mueller at mikatiming.de
> > WEB Adresse: www.mikatiming.de
> >
> > Key ID: 2AA04C1F
> >
> >
> >
> >
> > Am Donnerstag, den 17.12.2009, 19:02 +0000 schrieb James
> > Hogarth:
> >
> > > definately properly disabled?
> > >
> > > getenforce shows disabled?
> > >
> > > do you have any selinux context within the configuration
> > channel for
> > > that file?
> > >
> > > 2009/12/17 Gerd Mueller <gerd.mueller at mikatiming.de>
> > > The strange thing is that I have 12 identical server
> > with
> > > selinux
> > > disabled. 3 of them show a difference. I have no
> > clue what's
> > > wrong.
> > >
> > > Gerd
> > >
> > > --
> > > Gerd Mueller
> > >
> > > Mika Timing GmbH
> > > Strundepark
> > > Kuertener Str. 11b
> > > 51465 Bergisch Gladbach
> > >
> > > Phone: +49 (0)2202-2401-153
> > > Mobile: +49 (0)151 5500 4015
> > > Fax: +49 (0)2202-2401-253
> > > email: gerd.mueller at mikatiming.de
> > > WEB Adresse: www.mikatiming.de
> > >
> > > Key ID: 2AA04C1F
> > >
> > >
> > >
> > >
> > > Am Mittwoch, den 16.12.2009, 19:07 +0000 schrieb
> > James
> > > Hogarth:
> > >
> > > > sounds like you have an selinux context for the
> > file in the
> > > spacewalk
> > > > config screens but selinux disabled on the client
> > > >
> > > > with selinux disabled the kernel is unaware of the
> > extended
> > > attributes
> > > > required for selinux - effectively all files have
> > no selinux
> > > context
> > > >
> > > > thus a config compare shows the difference - an
> > selinux
> > > context
> > > > defined on the spacewalk server but no selinux
> > contexts on
> > > the client
> > > >
> > > > either set your client to permissive selinux (and
> > reboot) or
> > > remove
> > > > the selinux contexts from the files in the
> > configuration
> > > screens in
> > > > spacewalk
> > > >
> > > > 2009/12/16 Thomas Foster
> > <thomas.foster80 at gmail.com>
> > > > What is the context for the files listed?
> > > >
> > > >
> > > >
> > > > On Wed, Dec 16, 2009 at 11:34 AM, Gerd
> > Mueller
> > > > <gerd.mueller at mikatiming.de> wrote:
> > > > did not work... Any further idea?
> > > >
> > > > Gerd
> > > >
> > > > --
> > > > Gerd Mueller
> > > >
> > > > Mika Timing GmbH
> > > > Strundepark
> > > > Kuertener Str. 11b
> > > > 51465 Bergisch Gladbach
> > > >
> > > > Phone: +49 (0)2202-2401-153
> > > > Mobile: +49 (0)151 5500 4015
> > > > Fax: +49 (0)2202-2401-253
> > > > email: gerd.mueller at mikatiming.de
> > > > WEB Adresse: www.mikatiming.de
> > > >
> > > > Key ID: 2AA04C1F
> > > >
> > > >
> > > >
> > > > Am Mittwoch, den 16.12.2009, 06:25
> > -0500
> > > schrieb
> > > > Thomas Foster:
> > > > > Try restorecon <filenames>
> > > > >
> > > > > On Wed, Dec 16, 2009 at 4:59 AM,
> > Gerd
> > > Mueller
> > > > > <gerd.mueller at mikatiming.de>
> > wrote:
> > > > > After deploying files I
> > still have
> > > > differences on a few
> > > > > systems:
> > > > >
> > > > > "SELinux contexts
> > differ! Current
> > > context:
> > > > None"
> > > > >
> > > > > But selinux is disabled?
> > > > >
> > > > > Anybody any idea?
> > > > >
> > > > > Thank you
> > > > >
> > > > > Gerd
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Gerd Mueller
> > > > >
> > > > > Mika Timing GmbH
> > > > > Strundepark
> > > > > Kuertener Str. 11b
> > > > > 51465 Bergisch Gladbach
> > > > >
> > > > > Phone: +49
> > (0)2202-2401-153
> > > > > Mobile: +49 (0)151 5500
> > 4015
> > > > > Fax: +49
> > (0)2202-2401-253
> > > > > email:
> > gerd.mueller at mikatiming.de
> > > > > WEB Adresse:
> > www.mikatiming.de
> > > > >
> > > > > Key ID: 2AA04C1F
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > > _______________________________________________
> > > > > Spacewalk-list mailing
> > list
> > > > >
> > Spacewalk-list at redhat.com
> > > > >
> > > >
> > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > > >
> > > > >
> > > _______________________________________________
> > > > > Spacewalk-list mailing list
> > > > > Spacewalk-list at redhat.com
> > > > >
> > > >
> > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > >
> > > _______________________________________________
> > > > Spacewalk-list mailing list
> > > > Spacewalk-list at redhat.com
> > > >
> > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > >
> > > >
> > > >
> > _______________________________________________
> > > > Spacewalk-list mailing list
> > > > Spacewalk-list at redhat.com
> > > >
> > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > > _______________________________________________
> > > > Spacewalk-list mailing list
> > > > Spacewalk-list at redhat.com
> > > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > >
> > >
> > > _______________________________________________
> > > Spacewalk-list mailing list
> > > Spacewalk-list at redhat.com
> > >
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> > >
> > > _______________________________________________
> > > Spacewalk-list mailing list
> > > Spacewalk-list at redhat.com
> > > https://www.redhat.com/mailman/listinfo/spacewalk-list
> >
> >
> > _______________________________________________
> > Spacewalk-list mailing list
> > Spacewalk-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
> >
> > _______________________________________________
> > Spacewalk-list mailing list
> > Spacewalk-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20091217/799cfc1f/attachment.htm>
More information about the Spacewalk-list
mailing list