To summarize, the findings to date by Robert Jacobson and myself indicate that:
1. The first SELinux solution given by the cobbler check command should be:
/usr/sbin/semanage fcontext -a -t public_content_t "/var/lib/tftpboot(/.*)?"
&& /usr/sbin/semanage fcontext -a -t public_content_t
"/var/www/cobbler/images(/.*)?" followed by
/sbin/restorecon –v /var/lib/tftpboot and
/sbin/restorecon –v /var/www/cobbler/images
The directory /var/www/cobbler/images does not appear to be created by the cobbler
installation. Either the installation will need to create this file or it will need to be
created manually prior to issuing the restorecon command.
2. The second SELinux solution given by the cobbler check command should be:
/usr/sbin/semanage fcontext -a -t httpd_sys_rw_content_t
"/var/lib/cobbler/webui_sessions(/.*)?" followed by
/sbin/restorecon –v /var/lib/cobbler/webui_sessions
Also, the test that the cobbler check command uses to determine if this correction is
necessary also needs the type tag changed from httpd_sys_content_rw_t to
httpd_sys_rw_content_t.
We have discovered other issues in both the cobbler import and cobbler sync commands that
we will report in the future.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Stuart J. Newman
Engineer 4; Systems
Solar Dynamics Observatory (SDO)
Honeywell Technology Solutions Inc
NASA/Goddard Space Flight Center
Building 14, Room E222
Mail Stop 428.2
Greenbelt, MD 20771
Office: (301) 286-5145
EMail: Stuart.J.Newman(a)nasa.gov
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
NOTICE: This communication, including any attachment, contains information that may be
confidential or privileged, and is intended solely for the entity or individual to whom it
is addressed. If you are not the intended recipient, please notify the sender at once,
and you should delete this message and are hereby notified that any disclosure, copying,
or distribution of this message is strictly prohibited. Nothing in this email, including
any attachment, is intended to be a legally binding signature.
Show replies by date