[Spacewalk-list] SELinux contexts differ! Current context: None
Gerd Mueller
gerd.mueller at mikatiming.de
Fri Dec 18 14:17:04 UTC 2009
I recreated the file identical. Now it works...
Gerd
--
Gerd Mueller
Mika Timing GmbH
Strundepark
Kuertener Str. 11b
51465 Bergisch Gladbach
Phone: +49 (0)2202-2401-153
Mobile: +49 (0)151 5500 4015
Fax: +49 (0)2202-2401-253
email: gerd.mueller at mikatiming.de
WEB Adresse: www.mikatiming.de
Key ID: 2AA04C1F
Am Donnerstag, den 17.12.2009, 20:33 +0000 schrieb James Hogarth:
> long shot perhaps but might be worth a go....
>
> try using the import part of the add files screen to import the file
> from one of the hosts it's showing that message into a single system
> override and then deploy/compare with that...
>
> given the import it should be identical and if it passes that we can
> then compare the resultant imported file versus what is in your
> central configuration channel....
>
> thoughts?
>
> 2009/12/17 Gerd Mueller <gerd.mueller at mikatiming.de>
> no, not even a blank
>
> Gerd
>
> --
> Gerd Mueller
>
> Mika Timing GmbH
> Strundepark
> Kuertener Str. 11b
> 51465 Bergisch Gladbach
>
> Phone: +49 (0)2202-2401-153
> Mobile: +49 (0)151 5500 4015
> Fax: +49 (0)2202-2401-253
> email: gerd.mueller at mikatiming.de
> WEB Adresse: www.mikatiming.de
>
> Key ID: 2AA04C1F
>
>
>
>
> Am Donnerstag, den 17.12.2009, 19:51 +0000 schrieb James
> Hogarth:
>
> > And no context information within the configuration channel
> for that
> > file?
> >
> > 2009/12/17 Gerd Mueller <gerd.mueller at mikatiming.de>
> > all of them show disabled (I check all of them at
> once with
> > cluster
> > ssh). But still 3 of them claim the context is
> different.
> >
> > Gerd
> >
> > --
> > Gerd Mueller
> >
> > Mika Timing GmbH
> > Strundepark
> > Kuertener Str. 11b
> > 51465 Bergisch Gladbach
> >
> > Phone: +49 (0)2202-2401-153
> > Mobile: +49 (0)151 5500 4015
> > Fax: +49 (0)2202-2401-253
> > email: gerd.mueller at mikatiming.de
> > WEB Adresse: www.mikatiming.de
> >
> > Key ID: 2AA04C1F
> >
> >
> >
> >
> > Am Donnerstag, den 17.12.2009, 19:02 +0000 schrieb
> James
> > Hogarth:
> >
> > > definately properly disabled?
> > >
> > > getenforce shows disabled?
> > >
> > > do you have any selinux context within the
> configuration
> > channel for
> > > that file?
> > >
> > > 2009/12/17 Gerd Mueller
> <gerd.mueller at mikatiming.de>
> > > The strange thing is that I have 12
> identical server
> > with
> > > selinux
> > > disabled. 3 of them show a difference. I
> have no
> > clue what's
> > > wrong.
> > >
> > > Gerd
> > >
> > > --
> > > Gerd Mueller
> > >
> > > Mika Timing GmbH
> > > Strundepark
> > > Kuertener Str. 11b
> > > 51465 Bergisch Gladbach
> > >
> > > Phone: +49 (0)2202-2401-153
> > > Mobile: +49 (0)151 5500 4015
> > > Fax: +49 (0)2202-2401-253
> > > email: gerd.mueller at mikatiming.de
> > > WEB Adresse: www.mikatiming.de
> > >
> > > Key ID: 2AA04C1F
> > >
> > >
> > >
> > >
> > > Am Mittwoch, den 16.12.2009, 19:07 +0000
> schrieb
> > James
> > > Hogarth:
> > >
> > > > sounds like you have an selinux context
> for the
> > file in the
> > > spacewalk
> > > > config screens but selinux disabled on
> the client
> > > >
> > > > with selinux disabled the kernel is
> unaware of the
> > extended
> > > attributes
> > > > required for selinux - effectively all
> files have
> > no selinux
> > > context
> > > >
> > > > thus a config compare shows the
> difference - an
> > selinux
> > > context
> > > > defined on the spacewalk server but no
> selinux
> > contexts on
> > > the client
> > > >
> > > > either set your client to permissive
> selinux (and
> > reboot) or
> > > remove
> > > > the selinux contexts from the files in
> the
> > configuration
> > > screens in
> > > > spacewalk
> > > >
> > > > 2009/12/16 Thomas Foster
> > <thomas.foster80 at gmail.com>
> > > > What is the context for the
> files listed?
> > > >
> > > >
> > > >
> > > > On Wed, Dec 16, 2009 at 11:34
> AM, Gerd
> > Mueller
> > > > <gerd.mueller at mikatiming.de>
> wrote:
> > > > did not work... Any
> further idea?
> > > >
> > > > Gerd
> > > >
> > > > --
> > > > Gerd Mueller
> > > >
> > > > Mika Timing GmbH
> > > > Strundepark
> > > > Kuertener Str. 11b
> > > > 51465 Bergisch Gladbach
> > > >
> > > > Phone: +49
> (0)2202-2401-153
> > > > Mobile: +49 (0)151 5500
> 4015
> > > > Fax: +49
> (0)2202-2401-253
> > > > email:
> gerd.mueller at mikatiming.de
> > > > WEB Adresse:
> www.mikatiming.de
> > > >
> > > > Key ID: 2AA04C1F
> > > >
> > > >
> > > >
> > > > Am Mittwoch, den
> 16.12.2009, 06:25
> > -0500
> > > schrieb
> > > > Thomas Foster:
> > > > > Try restorecon
> <filenames>
> > > > >
> > > > > On Wed, Dec 16, 2009
> at 4:59 AM,
> > Gerd
> > > Mueller
> > > > >
> <gerd.mueller at mikatiming.de>
> > wrote:
> > > > > After
> deploying files I
> > still have
> > > > differences on a few
> > > > > systems:
> > > > >
> > > > > "SELinux
> contexts
> > differ! Current
> > > context:
> > > > None"
> > > > >
> > > > > But selinux is
> disabled?
> > > > >
> > > > > Anybody any
> idea?
> > > > >
> > > > > Thank you
> > > > >
> > > > > Gerd
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Gerd Mueller
> > > > >
> > > > > Mika Timing
> GmbH
> > > > > Strundepark
> > > > > Kuertener Str.
> 11b
> > > > > 51465 Bergisch
> Gladbach
> > > > >
> > > > > Phone: +49
> > (0)2202-2401-153
> > > > > Mobile: +49
> (0)151 5500
> > 4015
> > > > > Fax: +49
> > (0)2202-2401-253
> > > > > email:
> > gerd.mueller at mikatiming.de
> > > > > WEB Adresse:
> > www.mikatiming.de
> > > > >
> > > > > Key ID:
> 2AA04C1F
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > >
> > >
> _______________________________________________
> > > > > Spacewalk-list
> mailing
> > list
> > > > >
> > Spacewalk-list at redhat.com
> > > > >
> > > >
> > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > > >
> > > > >
> > >
> _______________________________________________
> > > > > Spacewalk-list mailing
> list
> > > > >
> Spacewalk-list at redhat.com
> > > > >
> > > >
> > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > >
> > >
> _______________________________________________
> > > > Spacewalk-list mailing
> list
> > > >
> Spacewalk-list at redhat.com
> > > >
> > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > >
> > > >
> > > >
> > _______________________________________________
> > > > Spacewalk-list mailing list
> > > > Spacewalk-list at redhat.com
> > > >
> > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > > >
> > > >
> _______________________________________________
> > > > Spacewalk-list mailing list
> > > > Spacewalk-list at redhat.com
> > > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > >
> > >
> > >
> _______________________________________________
> > > Spacewalk-list mailing list
> > > Spacewalk-list at redhat.com
> > >
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> > >
> > > _______________________________________________
> > > Spacewalk-list mailing list
> > > Spacewalk-list at redhat.com
> > >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> >
> >
> > _______________________________________________
> > Spacewalk-list mailing list
> > Spacewalk-list at redhat.com
> >
> https://www.redhat.com/mailman/listinfo/spacewalk-list
> >
> > _______________________________________________
> > Spacewalk-list mailing list
> > Spacewalk-list at redhat.com
> > https://www.redhat.com/mailman/listinfo/spacewalk-list
>
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
>
> _______________________________________________
> Spacewalk-list mailing list
> Spacewalk-list at redhat.com
> https://www.redhat.com/mailman/listinfo/spacewalk-list
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20091218/75ecc3e9/attachment.sig>
More information about the Spacewalk-list
mailing list