[Pki-devel] [PATCH] two more patches for nuxwdog

Ade Lee alee at redhat.com
Tue Apr 28 20:16:27 UTC 2015


Actually, it appears that starting the server using :

nuxwdog -f <conf_file> 

works just fine with selinux enforcing (at least for f20).
Ade

On Tue, 2015-04-28 at 15:54 -0400, Ade Lee wrote:
> 1. Patch 1 allows one to easily enable/disable nuxwdog for a particular
> instance.  In this case, one would use:
>     pki-server instance-nuxwdog-enable <instance> OR
>     pki-server instance-nuxwdog-disable <instance>  OR
>     pki-server nuxwdog-enable/disable  (for all instances on system)
> 
> 2. Documentation will follow in subsequent patches ie. when the man page
> for pki-server is created.
> 
> 3.  Patch 2 just amends the pki java security policy to allow the
> instance to be started with nuxwdog and java security policy on.
> 
> At this point, you still need selinux permissive, although I will be
> filing a BZ to add the required rules.
> 
> Please review,
> Ade
> _______________________________________________
> Pki-devel mailing list
> Pki-devel at redhat.com
> https://www.redhat.com/mailman/listinfo/pki-devel





More information about the Pki-devel mailing list