On 10/07/2009 01:51 PM, Mike Cloaked wrote: > > > Daniel J Walsh wrote: >> >> On 10/07/2009 08:42 AM, Julian Aloofi wrote: >>> Am Dienstag, den 06.10.2009, 12:57 -0700 schrieb Mike Cloaked: >>>> Does anyone know if it is still current practice to set SELinux to >>>> permissive >>>> before doing a spin re-build in mock/pungi in F11? >>>> >>>> Or has selinux policy now reached the point of refinement such that >>>> running >>>> a respin build works fine with selinux enforcing? >>>> >>>> Would be useful to know - I have not done respin builds since F10 so I >>>> am a >>>> little out of touch with current practice. >>>> >>>> Thanks in advance. >>>> -- >>>> View this message in context: >>>> http://www.nabble.com/Mock-Pungi-and-selinux-for-building-re-spins-in-f11-tp25775562p25775562.html >>>> Sent from the Fedora List mailing list archive at Nabble.com. >>>> >>> Yes, that's still required to successfully build a re-spin in pungi and >>> revisor if I remember correctly. >>> >> Could someone send me a list of AVC's. Is this the same problem that >> livecd has? Building a different OS, causes it's policy to be loaded >> during the install. We should be able to convince the Mock environment >> that SELinux is disabled, and then allow mock the ability to put down the >> labels like we do with livecd. >> >> > > Dan, I'll try and do a test build in the next couple of days, and post AVCs > if they pop up - would it be best to do this in a BZ report, rather than to > Fedora list? If so which component? selinux or mock/pungi? Open up one bug on mock/pungi with me cc'd and we can fix it. Since I think most of the changes have to be made in Mock to fake SELinux into thinking it is disabled or a fake /selinux like livecd has. -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
