long shot perhaps but might be worth a go.... try using the import part of the add files screen to import the file from one of the hosts it's showing that message into a single system override and then deploy/compare with that... given the import it should be identical and if it passes that we can then compare the resultant imported file versus what is in your central configuration channel.... thoughts? <div class="gmail_quote">2009/12/17 Gerd Mueller <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">no, not even a blank <div class="im"> Gerd -- Gerd Mueller Mika Timing GmbH Strundepark Kuertener Str. 11b 51465 Bergisch Gladbach Phone: +49 (0)2202-2401-153 Mobile: +49 (0)151 5500 4015 Fax: +49 (0)2202-2401-253 email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a> WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a> Key ID: 2AA04C1F </div>Am Donnerstag, den 17.12.2009, 19:51 +0000 schrieb James Hogarth: <div><div></div><div class="h5">> And no context information within the configuration channel for that > file? > > 2009/12/17 Gerd Mueller <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> > all of them show disabled (I check all of them at once with > cluster > ssh). But still 3 of them claim the context is different. > > Gerd > > -- > Gerd Mueller > > Mika Timing GmbH > Strundepark > Kuertener Str. 11b > 51465 Bergisch Gladbach > > Phone: +49 (0)2202-2401-153 > Mobile: +49 (0)151 5500 4015 > Fax: +49 (0)2202-2401-253 > email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a> > WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a> > > Key ID: 2AA04C1F > > > > > Am Donnerstag, den 17.12.2009, 19:02 +0000 schrieb James > Hogarth: > > > definately properly disabled? > > > > getenforce shows disabled? > > > > do you have any selinux context within the configuration > channel for > > that file? > > > > 2009/12/17 Gerd Mueller <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> > > The strange thing is that I have 12 identical server > with > > selinux > > disabled. 3 of them show a difference. I have no > clue what's > > wrong. > > > > Gerd > > > > -- > > Gerd Mueller > > > > Mika Timing GmbH > > Strundepark > > Kuertener Str. 11b > > 51465 Bergisch Gladbach > > > > Phone: +49 (0)2202-2401-153 > > Mobile: +49 (0)151 5500 4015 > > Fax: +49 (0)2202-2401-253 > > email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a> > > WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a> > > > > Key ID: 2AA04C1F > > > > > > > > > > Am Mittwoch, den 16.12.2009, 19:07 +0000 schrieb > James > > Hogarth: > > > > > sounds like you have an selinux context for the > file in the > > spacewalk > > > config screens but selinux disabled on the client > > > > > > with selinux disabled the kernel is unaware of the > extended > > attributes > > > required for selinux - effectively all files have > no selinux > > context > > > > > > thus a config compare shows the difference - an > selinux > > context > > > defined on the spacewalk server but no selinux > contexts on > > the client > > > > > > either set your client to permissive selinux (and > reboot) or > > remove > > > the selinux contexts from the files in the > configuration > > screens in > > > spacewalk > > > > > > 2009/12/16 Thomas Foster > <<a href="mailto:thomas.foster80@gmail.com">thomas.foster80@gmail.com</a>> > > > What is the context for the files listed? > > > > > > > > > > > > On Wed, Dec 16, 2009 at 11:34 AM, Gerd > Mueller > > > <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> wrote: > > > did not work... Any further idea? > > > > > > Gerd > > > > > > -- > > > Gerd Mueller > > > > > > Mika Timing GmbH > > > Strundepark > > > Kuertener Str. 11b > > > 51465 Bergisch Gladbach > > > > > > Phone: +49 (0)2202-2401-153 > > > Mobile: +49 (0)151 5500 4015 > > > Fax: +49 (0)2202-2401-253 > > > email: <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a> > > > WEB Adresse: <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a> > > > > > > Key ID: 2AA04C1F > > > > > > > > > > > > Am Mittwoch, den 16.12.2009, 06:25 > -0500 > > schrieb > > > Thomas Foster: > > > > Try restorecon <filenames> > > > > > > > > On Wed, Dec 16, 2009 at 4:59 AM, > Gerd > > Mueller > > > > <<a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a>> > wrote: > > > > After deploying files I > still have > > > differences on a few > > > > systems: > > > > > > > > "SELinux contexts > differ! Current > > context: > > > None" > > > > > > > > But selinux is disabled? > > > > > > > > Anybody any idea? > > > > > > > > Thank you > > > > > > > > Gerd > > > > > > > > > > > > > > > > -- > > > > Gerd Mueller > > > > > > > > Mika Timing GmbH > > > > Strundepark > > > > Kuertener Str. 11b > > > > 51465 Bergisch Gladbach > > > > > > > > Phone: +49 > (0)2202-2401-153 > > > > Mobile: +49 (0)151 5500 > 4015 > > > > Fax: +49 > (0)2202-2401-253 > > > > email: > <a href="mailto:gerd.mueller@mikatiming.de">gerd.mueller@mikatiming.de</a> > > > > WEB Adresse: > <a href="http://www.mikatiming.de" target="_blank">www.mikatiming.de</a> > > > > > > > > Key ID: 2AA04C1F > > > > > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > Spacewalk-list mailing > list > > > > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > > > > > > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > > > > > > > _______________________________________________ > > > > Spacewalk-list mailing list > > > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > > > > > > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > > > > > _______________________________________________ > > > Spacewalk-list mailing list > > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > > > > > > > > > > _______________________________________________ > > > Spacewalk-list mailing list > > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > > > _______________________________________________ > > > Spacewalk-list mailing list > > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > > > _______________________________________________ > > Spacewalk-list mailing list > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > > _______________________________________________ > > Spacewalk-list mailing list > > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > > _______________________________________________ > Spacewalk-list mailing list > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> > > _______________________________________________ > Spacewalk-list mailing list > <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> </div></div> _______________________________________________ Spacewalk-list mailing list <a href="mailto:Spacewalk-list@redhat.com">Spacewalk-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/spacewalk-list" target="_blank">https://www.redhat.com/mailman/listinfo/spacewalk-list</a> </blockquote></div>