Project

General

Profile

Actions

Bug #7477

closed

Bug #7393: Selinux policy prevent running cf-agent when using technique editor

Bug #7456: Missing selinux context on techniques folder

Bug #7465: Still some isses with selinux and ncf-api-venv

If selinux is disabled we have some error outputs on package installation

Added by Vincent MEMBRÉ over 8 years ago. Updated over 8 years ago.

Status:
Released
Priority:
1
Category:
Packaging
Target version:
Severity:
UX impact:
User visibility:
Effort required:
Priority:
Name check:
Fix check:
Regression:

Description

Here is the output of ncf-api-virtualenv installation when selinux is disabled

We should check that selinux is enabled before applying security policies

==> centos7_server: INFO: Applying ncf-api-virtualenv selinux policy...SELinux:  Could not downgrade policy file /etc/selinux/targeted/policy/policy.24, searching for an older version.
==> centos7_server: SELinux:  Could not open policy file <= /etc/selinux/targeted/policy/policy.24:  No such file or directory
==> centos7_server: libsemanage.semanage_reload_policy: load_policy returned error code 2.
==> centos7_server: SELinux:  Could not downgrade policy file /etc/selinux/targeted/policy/policy.24, searching for an older version.
==> centos7_server: SELinux:  Could not open policy file <= /etc/selinux/targeted/policy/policy.24:  No such file or directory
==> centos7_server: libsemanage.semanage_reload_policy: load_policy returned error code 2.
==> centos7_server: /usr/sbin/semanage: Could not commit semanage transaction
==> centos7_server:  Done
Actions #1

Updated by Vincent MEMBRÉ over 8 years ago

  • Status changed from New to In progress
  • Assignee set to Vincent MEMBRÉ
Actions #2

Updated by Vincent MEMBRÉ over 8 years ago

  • Target version changed from 3.2.0~beta1 to 3.1.5
Actions #3

Updated by Vincent MEMBRÉ over 8 years ago

  • Parent task set to #7465
Actions #4

Updated by Vincent MEMBRÉ over 8 years ago

  • Status changed from In progress to Pending technical review
  • Assignee changed from Vincent MEMBRÉ to Benoît PECCATTE
  • Pull Request set to https://github.com/Normation/rudder-packages/pull/811
Actions #5

Updated by Vincent MEMBRÉ over 8 years ago

  • Status changed from Pending technical review to Pending release
  • % Done changed from 0 to 100
Actions #7

Updated by Vincent MEMBRÉ over 8 years ago

  • Status changed from Pending release to Released

This bug has been fixed in Rudder 3.1.5 which was released today.

Actions

Also available in: Atom PDF