[Fedora-directory-devel] SELinux and directory server

[Rob Crittenden]

Karl MacMillan wrote:
> The page http://directory.fedoraproject.org/wiki/Install_Guide suggests
> putting selinux into permissive mode. Why? I've not seen any problems
> running the directory server under enforcing (either fedora-ds-base from
> extras or the full install).

Without looking I suspect it is because the newer packages fit into the 
filesystem better so are probably covered by existing SELinux rules. 
When it was installed in /opt/fedora-ds alone there was no security 
context covering it.

It probably heavily depends on which release you're installing it onto 
as well.

rob
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-devel/attachments/20070509/11d52aa5/attachment.bin>