[Thincrust-devel] Just checking on the status of thincrust working with SELinux.

[Luke Macken]

David Huff wrote:
> Bryan Kearney wrote:
> > Daniel J Walsh wrote:
> >> Is there any problems with running thincrust applications with SELinux
> >> in enforcing mode?  If so I would like to work with the developers to
> >> fix any problems they are having.
> >>
> >> Dan
> >>
> > 
> > I have not heard any issues lately. David/Joey?
> > 
> > -- bk
> 
> As long as the image is build on a machine with se-linux enabled it
> should work fine.  Also I am pretty sure the pre-build images ship with
> se-linux already set in enforcing mode, someone plese correct me if I a
> mistaken....
> 
> -D

Please correct me if I'm wrong, but it looks like SELinux is not enabled on by
default on any of the appliances?

    git.et.redhat.com/act/config/fedora-aos.ks:selinux --permissive
    git.et.redhat.com/act/config/fedora-aos.ks:#needed to disable selinux
    git.et.redhat.com/act/config/fedora-aos.ks:-selinux-policy*
    git.et.redhat.com/act/config/fedora-aos.ks:-libselinux-python
    git.et.redhat.com/act/config/fedora-aos.ks:-libselinux
    git.et.redhat.com/ace/resources/moinAppliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/cobblerAppliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/drupalAppliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/mediaWikiAppliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/ec2Appliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/gitAppliance-f10.ks:selinux --permissive
    git.et.redhat.com/ace/resources/kronolithAppliance-f10.ks:selinux --disabled
    git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:#needed to disable selinux
    git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:selinux-policy*
    git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:libselinux-python
    git.et.redhat.com/ace/resources/appliance-os-base-pkgs.ks:libselinux
    git.et.redhat.com/ace/resources/cobbler/cobbler.ks:selinux --disabled
    git.et.redhat.com/ace/resources/cobbler/cobbler.ks:echo "SELINUX=disabled" > /etc/selinux/config
    git.et.redhat.com/ace/resources/cobbler/snippets/aos_package_header:-selinux-policy*
    git.et.redhat.com/ace/resources/baseAppliance-f9.ks:selinux --permissive
    git.et.redhat.com/ace/resources/baseAppliance-f10.ks:selinux --permissive
    git.et.redhat.com/aos/rhel-aos.ks:selinux --disabled
    git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:# selinux toolchain of policycoreutils, libsemanage, ustr
    git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-selinux-policy*
    git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-libselinux-python
    git.et.redhat.com/aos/snippets/rhel5-pkgs.ks:#-libselinux
    git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:#needed to disable selinux
    git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:# selinux toolchain of policycoreutils, libsemanage, ustr
    git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-selinux-policy*
    git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-libselinux-python
    git.et.redhat.com/aos/snippets/base-aos-pkgs.ks:-libselinux
    git.et.redhat.com/aos/fedora-aos.ks:selinux --permissive


luke