[Freeipa-devel] [PATCHES] 0633-0634 Move setting SELinux booleans to platform code; Set SELinux booleans when restoring

[Petr Viktorin]

A fix for https://fedorahosted.org/freeipa/ticket/4157

This depends on my patches 0631-0632 (for backup/restore integration tests).


Our setsebool code was repeated a few times. Instead of adding another 
copy, I refactored what we have into a platform task.
I fixed two old setsebool tickets while I was at it:
     https://fedorahosted.org/freeipa/ticket/2519
     https://fedorahosted.org/freeipa/ticket/2934

Since ipaplatform should not depend on ipalib, and I needed a new 
exception type, I added a new module, ipapython.errors. This might not 
be the best name, since it could be confused with ipalib.errors. 
Opinions welcome.


As for the second patch: ideally, rather than what I do with `if 
'ADTRUST' in self.backup_services`, we'd get the list of booleans 
directly from the *instance modules, or even tell the individual 
services to restore themselves. But, that refactoring looks like too 
much to do now.

-- 
Petr³
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0411-Move-setting-SELinux-booleans-to-platform-code.patch
Type: text/x-patch
Size: 16594 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140815/f42568ad/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-pviktori-0412-ipa-restore-Set-SELinux-booleans-when-restoring.patch
Type: text/x-patch
Size: 3899 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20140815/f42568ad/attachment-0001.bin>