Bug 1418579
| Summary: | Use selinux when building ovirt-appliance | ||
|---|---|---|---|
| Product: | [oVirt] ovirt-appliance | Reporter: | Yuval Turgeman <yturgema> |
| Component: | Build | Assignee: | Yuval Turgeman <yturgema> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Gonza <grafuls> |
| Severity: | medium | Docs Contact: | |
| Priority: | high | ||
| Version: | 4.1 | CC: | bugs, jclaretm, lsvaty, mgoldboi, rbarry, sbonazzo, stirabos, trichard, yturgema |
| Target Milestone: | ovirt-4.2.2 | Keywords: | Improvement |
| Target Release: | --- | Flags: | rule-engine:
ovirt-4.2+
grafuls: testing_plan_complete- sbonazzo: devel_ack+ lsvaty: testing_ack+ |
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Enhancement | |
| Doc Text: |
SELinux is now set to Enforcing by default in the ovirt-appliance.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2018-03-29 11:03:55 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | Node | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Yuval Turgeman
2017-02-02 08:50:33 UTC
This was reverted since engine-setup (firewall-cmd) hangs in selinux when run from cloud-ini (missing transition from cloud_init_t to firewalld_t) Target release should be placed once a package build is known to fix a issue. Since this bug is not modified, the target version has been reset. Please use target milestone to plan a fix for a oVirt release. Dropping code change, since this requires a full functional test once done. Yuval - has a bug been filed against cloud-init for this? Yes, not by us, though, but it's the same behavior, see bug 1126096 I just noticed that bug 1126096 was reported in 2014, could setenforce 0 or add cloud_init_t to permissive in our cloud-init script ? Can this move to MODIFIED? We need a patch in appliance code. Checked on: rhvm-appliance-20180103.0-1.x86_64.rhevm.ova $ getenforce Permissive Target release should be placed once a package build is known to fix a issue. Since this bug is not modified, the target version has been reset. Please use target milestone to plan a fix for a oVirt release. Verified with: rhvm-appliance-4.2-20180202.0.x86_64.rhevm.ova # getenforce Enforcing This bugzilla is included in oVirt 4.2.2 release, published on March 28th 2018. Since the problem described in this bug report should be resolved in oVirt 4.2.2 release, it has been closed with a resolution of CURRENT RELEASE. If the solution does not work for you, please open a new bug report. |