And no context information within the configuration channel for that file?<br><br><div class="gmail_quote">2009/12/17 Gerd Mueller <span dir="ltr"><<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">all of them show disabled (I check all of them at once with cluster<br>
ssh). But still 3 of them claim the context is different.<br>
<div class="im"><br>
Gerd<br>
<br>
--<br>
Gerd Mueller<br>
<br>
Mika Timing GmbH<br>
Strundepark<br>
Kuertener Str. 11b<br>
51465 Bergisch Gladbach<br>
<br>
Phone: +49 (0)2202-2401-153<br>
Mobile: +49 (0)151 5500 4015<br>
Fax: +49 (0)2202-2401-253<br>
email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a><br>
WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a><br>
<br>
Key ID: 2AA04C1F<br>
<br>
<br>
<br>
</div>Am Donnerstag, den 17.12.2009, 19:02 +0000 schrieb James Hogarth:<br>
<div><div></div><div class="h5">> definately properly disabled?<br>
><br>
> getenforce shows disabled?<br>
><br>
> do you have any selinux context within the configuration channel for<br>
> that file?<br>
><br>
> 2009/12/17 Gerd Mueller <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>><br>
> The strange thing is that I have 12 identical server with<br>
> selinux<br>
> disabled. 3 of them show a difference. I have no clue what's<br>
> wrong.<br>
><br>
> Gerd<br>
><br>
> --<br>
> Gerd Mueller<br>
><br>
> Mika Timing GmbH<br>
> Strundepark<br>
> Kuertener Str. 11b<br>
> 51465 Bergisch Gladbach<br>
><br>
> Phone: +49 (0)2202-2401-153<br>
> Mobile: +49 (0)151 5500 4015<br>
> Fax: +49 (0)2202-2401-253<br>
> email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a><br>
> WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a><br>
><br>
> Key ID: 2AA04C1F<br>
><br>
><br>
><br>
><br>
> Am Mittwoch, den 16.12.2009, 19:07 +0000 schrieb James<br>
> Hogarth:<br>
><br>
> > sounds like you have an selinux context for the file in the<br>
> spacewalk<br>
> > config screens but selinux disabled on the client<br>
> ><br>
> > with selinux disabled the kernel is unaware of the extended<br>
> attributes<br>
> > required for selinux - effectively all files have no selinux<br>
> context<br>
> ><br>
> > thus a config compare shows the difference - an selinux<br>
> context<br>
> > defined on the spacewalk server but no selinux contexts on<br>
> the client<br>
> ><br>
> > either set your client to permissive selinux (and reboot) or<br>
> remove<br>
> > the selinux contexts from the files in the configuration<br>
> screens in<br>
> > spacewalk<br>
> ><br>
> > 2009/12/16 Thomas Foster <<a href="mailto:thomas.foster80@gmail.com">thomas.foster80@gmail.com</a>><br>
> > What is the context for the files listed?<br>
> ><br>
> ><br>
> ><br>
> > On Wed, Dec 16, 2009 at 11:34 AM, Gerd Mueller<br>
> > <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> wrote:<br>
> > did not work... Any further idea?<br>
> ><br>
> > Gerd<br>
> ><br>
> > --<br>
> > Gerd Mueller<br>
> ><br>
> > Mika Timing GmbH<br>
> > Strundepark<br>
> > Kuertener Str. 11b<br>
> > 51465 Bergisch Gladbach<br>
> ><br>
> > Phone: +49 (0)2202-2401-153<br>
> > Mobile: +49 (0)151 5500 4015<br>
> > Fax: +49 (0)2202-2401-253<br>
> > email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a><br>
> > WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a><br>
> ><br>
> > Key ID: 2AA04C1F<br>
> ><br>
> ><br>
> ><br>
> > Am Mittwoch, den 16.12.2009, 06:25 -0500<br>
> schrieb<br>
> > Thomas Foster:<br>
> > > Try restorecon <filenames><br>
> > ><br>
> > > On Wed, Dec 16, 2009 at 4:59 AM, Gerd<br>
> Mueller<br>
> > > <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> wrote:<br>
> > > After deploying files I still have<br>
> > differences on a few<br>
> > > systems:<br>
> > ><br>
> > > "SELinux contexts differ! Current<br>
> context:<br>
> > None"<br>
> > ><br>
> > > But selinux is disabled?<br>
> > ><br>
> > > Anybody any idea?<br>
> > ><br>
> > > Thank you<br>
> > ><br>
> > > Gerd<br>
> > ><br>
> > ><br>
> > ><br>
> > > --<br>
> > > Gerd Mueller<br>
> > ><br>
> > > Mika Timing GmbH<br>
> > > Strundepark<br>
> > > Kuertener Str. 11b<br>
> > > 51465 Bergisch Gladbach<br>
> > ><br>
> > > Phone: +49 (0)2202-2401-153<br>
> > > Mobile: +49 (0)151 5500 4015<br>
> > > Fax: +49 (0)2202-2401-253<br>
> > > email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a><br>
> > > WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a><br>
> > ><br>
> > > Key ID: 2AA04C1F<br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> > ><br>
> ><br>
> _______________________________________________<br>
> > > Spacewalk-list mailing list<br>
> > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> > ><br>
> ><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
> > ><br>
> > ><br>
> _______________________________________________<br>
> > > Spacewalk-list mailing list<br>
> > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> > ><br>
> ><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
> ><br>
> ><br>
> _______________________________________________<br>
> > Spacewalk-list mailing list<br>
> > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> ><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
> ><br>
> ><br>
> ><br>
> > _______________________________________________<br>
> > Spacewalk-list mailing list<br>
> > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> ><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
> ><br>
> > _______________________________________________<br>
> > Spacewalk-list mailing list<br>
> > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
><br>
><br>
> _______________________________________________<br>
> Spacewalk-list mailing list<br>
> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
><br>
> _______________________________________________<br>
> Spacewalk-list mailing list<br>
> <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br>
</div></div><br>_______________________________________________<br>
Spacewalk-list mailing list<br>
<a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a><br>
<a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a><br></blockquote></div><br>