Bug 721014 - Cgroup feature documentation throwing selinux errors.
Summary: Cgroup feature documentation throwing selinux errors.
Keywords:
Status: CLOSED CANTFIX
Alias: None
Product: Fedora Documentation
Classification: Fedora
Component: fedora-websites
Version: devel
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Fedora Websites Team
QA Contact: Karsten Wade
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-07-13 14:35 UTC by Wade Mealing
Modified: 2012-03-13 05:06 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-03-13 05:06:15 UTC


Attachments (Terms of Use)

Description Wade Mealing 2011-07-13 14:35:25 UTC
Description of problem:

http://fedoraproject.org/wiki/Features/ControlGroups gives bad instructions, you can't start the cgconfig service without a selinux denial. ( Does anyone but me run with selinux enabled ????)

Start the cgconfig service 


Version-Release number of selected component (if applicable):

libcgroup-0.37.1-3.fc15.x86_64

How reproducible:

Every time.

Steps to Reproduce:
0. Make sure your selinux is enabled.
1. Follow instructions for cgroup setup instructions on f15
2. Restart the ggconfig service with setting
3. Selinux denial.

Jul 14 00:18:37 mutalisk setroubleshoot: SELinux is preventing /sbin/cgconfigparser from write access on the directory /mnt. For complete SELinux messages. run sealert -l 2af5d5b1-7e20-43ec-8eae-861fd3f35c2f

sealert -l 2af5d5b1-7e20-43ec-8eae-861fd3f35c2f

If you want to allow cgconfigparser to have write access on the mnt directory
Then you need to change the label on /mnt
Do
# semanage fcontext -a -t FILE_TYPE '/mnt'
where FILE_TYPE is one of the following: cgroup_t, root_t. 
Then execute: 
restorecon -v '/mnt'


Expected results:

Better documentation on cgroups relevant to how it is setup in Fedora, or at least updated instructions that work with selinux.

Additional info:

This may not be the right place to report this, or even if this page is supposed to be used as a guide on the cgroup basics.

Comment 1 Wade Mealing 2012-03-13 05:06:15 UTC
Closing, nobody cares.


Note You need to log in before you can comment on or make changes to this bug.