Bug 430032 - avc errors after install
Summary: avc errors after install
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: freeIPA
Classification: Retired
Component: ipa-server
Version: 1.0
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Rob Crittenden
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On:
Blocks: freeipa10 429034
TreeView+ depends on / blocked
 
Reported: 2008-01-24 07:14 UTC by Chandrasekar Kannan
Modified: 2012-03-27 07:18 UTC (History)
5 users (show)

Fixed In Version: freeipa-2.0.0-1.fc15
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Chandrasekar Kannan 2008-01-24 07:14:23 UTC
Ticket #168 (new defect)

Opened 1 month ago

Last modified 1 month ago
avc errors after install
Reported by: 	simo 	Assigned to: 	kmacmill
Priority: 	minor 	Milestone: 	release-1
Component: 	ipa-server 	Version: 	
Keywords: 		Cc: 	
Description ¶

For some reason a normal install failed to change the selinux httpd_can_network_connect boolena to on Verify it is correctly set
Change History
2007-12-20 15:14:18 changed by kmacmill ¶

    * milestone changed from milestone-6 to release-1.

Comment 3 Rob Crittenden 2008-02-05 22:00:29 UTC
I can't duplicate this error.

Setting to MODIFIED for QE to test.

To be sure you are really testing this make sure that the boolean starts of as
off (the default) before running ipa-server-install with:

# /usr/sbin/getsebool httpd_can_network_connect
httpd_can_network_connect --> off

If it is on you can turn it off with:

# /usr/sbin/setsebool -P httpd_can_network_connect false

Comment 4 Yi Zhang 2008-05-28 18:09:37 UTC
I can not duplicate this error either.

In my test, /usr/sbin/getsebool httpd_can_network_connect returns "off" before
ipa-server-install, and it returns "on" after install. 

this bug will be closed.

QA Verified on May 28, 2008 (Yi)

Build used: May 28, 2008 (64)


Note You need to log in before you can comment on or make changes to this bug.