Re: Setting up CVS repository and avoiding Selinux issues?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2009-04-28 at 19:07 -0700, Daniel B. Thurman wrote:
> 
> I am trying to get my CVS repository setup.  Apparently,
> it appears that the repository must be in the root directory,
> otherwise I get selinux permission denials.
> 
> What I tried to do initially was to locate the repository
> on a NTFS filesystem for which the context is fusefs
> which could not be changed, no matter what I tried.
> I got selinux permission errors.
> 
> Giving that up, I moved the repository to a ext3 filesystem
> located on a separate drive/partition, mounted on /f-App1,
> where the repository is located @ /f-App1/Develop/cvs, and did:
> 
> cd /f-App1/Develop/
> chown -R cvs:cvs cvs
> chcon -R -t cvs_data_t cvs
> find cvs -type d -exec chmod 755 {} \;
> find cvs -type t -exec chmod 754 {} \;
> ln -s /f-App1/Develop/cvs /cvs
> 
> and I got selinux complaining that the files are not /cvs rooted.
> 
> So I did:
> 
> cp -a /f-App1/Develop/cvs  /cvs1
> rm -f /cvs
> ln -s /cvs1 /cvs
> 
> And it worked.
> 
> How can I place my repository in a non-rooted, non-standard
> repository location and avoid the selinux complaints?
----
if it were me...

1 - I would never consider using NTFS filesystem for any versioning
software system for a LOT of reasons

2 - I would probably use git or svn before cvs but hey, it's not me.

3 - I haven't the foggiest notion of what the contexts are for cvs but
generally you look at the contexts that they have now that seem to be
working, move the files wherever and I think the contexts will follow
the files/folders and use commands like chcon and semanage...

chcon is temporary, probably a good starting point to test file/folder
contexts

semanage is permanent, once you have it figured out.

I used this...

semanage fcontext -a -t clamd_t "/var/clamav(/.*)?"

for clamav because they don't seem to want to fix that package ;-(

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux