Bug 721014

Description of problem:

http://fedoraproject.org/wiki/Features/ControlGroups gives bad instructions, you can't start the cgconfig service without a selinux denial. ( Does anyone but me run with selinux enabled ????)

Start the cgconfig service 


Version-Release number of selected component (if applicable):

libcgroup-0.37.1-3.fc15.x86_64

How reproducible:

Every time.

Steps to Reproduce:
0. Make sure your selinux is enabled.
1. Follow instructions for cgroup setup instructions on f15
2. Restart the ggconfig service with setting
3. Selinux denial.

Jul 14 00:18:37 mutalisk setroubleshoot: SELinux is preventing /sbin/cgconfigparser from write access on the directory /mnt. For complete SELinux messages. run sealert -l 2af5d5b1-7e20-43ec-8eae-861fd3f35c2f

sealert -l 2af5d5b1-7e20-43ec-8eae-861fd3f35c2f

If you want to allow cgconfigparser to have write access on the mnt directory
Then you need to change the label on /mnt
Do
# semanage fcontext -a -t FILE_TYPE '/mnt'
where FILE_TYPE is one of the following: cgroup_t, root_t. 
Then execute: 
restorecon -v '/mnt'


Expected results:

Better documentation on cgroups relevant to how it is setup in Fedora, or at least updated instructions that work with selinux.

Additional info:

This may not be the right place to report this, or even if this page is supposed to be used as a guide on the cgroup basics.