Tim Largy wrote:
I'm running Fedora 9, using cobbler 1.4.1 that yum retrieved for
me
from the Fedora updates repository. SELinux is denying tftpd access to
vmlinuz-PAE. This is in my /var/log/messages many times:
setroubleshoot: SELinux is preventing in.tftpd (tftpd_t)
"read" to ./vmlinuz-PAE (httpd_sys_content_t)
By the way, SELinux also prevents dhcpd and tffpd from writing to
/var/log/cobbler/cobbler.log. I'm not sure I'm in the mood to learn
how to write SELinux policy so I'm going to turn off SELinux
enforcement and try again.
Tim
_______________________________________________
cobbler mailing list
cobbler(a)lists.fedorahosted.org
https://fedorahosted.org/mailman/listinfo/cobbler
If you run "cobbler check" it will suggest 3 semanage rules that you
need to set in order to use Cobbler with SELinux. Have you set them?
This will ensure content that is hardlinked between the two locations is
labelled public_content_t, not httpd_sys_content_t or tftpd_t, which is
not sharable between the two types
of ways the content needs to be served up.
The semanage rule will make sure this is always set automatically,
ideally requiring no further interaction to fix this when you run
cobbler commands.
DHCP and TFTP don't write to cobbler.log at all, which leads me to
believe that particular error may be a bug in selinux, and should be
reported there. I'm running Fedora 9 and haven't seen that problem.
Cobblerd itself runs unconfined presently and is the only thing that
writes to that log file.
--Michael