Bug 430032 - avc errors after install
avc errors after install
Product: freeIPA
Classification: Community
Component: ipa-server (Show other bugs)
All Linux
low Severity low
: ---
: ---
Assigned To: Rob Crittenden
Chandrasekar Kannan
Depends On:
Blocks: freeipa10 429034
  Show dependency treegraph
Reported: 2008-01-24 02:14 EST by Chandrasekar Kannan
Modified: 2012-03-27 03:18 EDT (History)
5 users (show)

See Also:
Fixed In Version: freeipa-2.0.0-1.fc15
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed:
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Chandrasekar Kannan 2008-01-24 02:14:23 EST
Ticket #168 (new defect)

Opened 1 month ago

Last modified 1 month ago
avc errors after install
Reported by: 	simo 	Assigned to: 	kmacmill
Priority: 	minor 	Milestone: 	release-1
Component: 	ipa-server 	Version: 	
Keywords: 		Cc: 	
Description ¶

For some reason a normal install failed to change the selinux httpd_can_network_connect boolena to on Verify it is correctly set
Change History
2007-12-20 15:14:18 changed by kmacmill ¶

    * milestone changed from milestone-6 to release-1.
Comment 3 Rob Crittenden 2008-02-05 17:00:29 EST
I can't duplicate this error.

Setting to MODIFIED for QE to test.

To be sure you are really testing this make sure that the boolean starts of as
off (the default) before running ipa-server-install with:

# /usr/sbin/getsebool httpd_can_network_connect
httpd_can_network_connect --> off

If it is on you can turn it off with:

# /usr/sbin/setsebool -P httpd_can_network_connect false
Comment 4 Yi Zhang 2008-05-28 14:09:37 EDT
I can not duplicate this error either.

In my test, /usr/sbin/getsebool httpd_can_network_connect returns "off" before
ipa-server-install, and it returns "on" after install. 

this bug will be closed.

QA Verified on May 28, 2008 (Yi)

Build used: May 28, 2008 (64)

Note You need to log in before you can comment on or make changes to this bug.