[Freeipa-devel] [PATCH] Fix some AVCs, relocate install logs

Rob Crittenden rcritten at redhat.com
Mon Mar 3 19:16:19 UTC 2008


We were seeing a ton of AVCs during installation. This is because we had 
the log file open but were forking, causing SELinux to not like that 
open file descriptor. I set close_fds on the Popen() call and that fixed it.

I've also relocated the logs to root's $HOME. If that can't be 
determined put them in /var/log. Both are much better than the current 
working directory.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-700-selinux.patch
Type: text/x-patch
Size: 2527 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080303/0046a195/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20080303/0046a195/attachment-0001.bin>


More information about the Freeipa-devel mailing list