-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 11/21/2013 11:19 AM, Dennis Gilmore wrote: > We don't use anaconda to make the images. We use appliance-creator which is > part of appliance-tools. I'm the upstream for them. > Is the appliance-tools running restorecon -R -v / in the end like livecd-creator used to? anaconda has a list of files/directories that it runs restorecon on after the install is done. The idea is to fix labels of content that was created before selinux policy was loaded into the kernel. If these are the only two files that are mislabeled, then I would just run restorecon on them. > Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > > On 11/21/2013 07:30 AM, Vitaly Kuznetsov wrote: > > Dennis Gilmore <dennis@xxxxxxxx> writes: > > Hi all, > > Final TC2 images have been uploaded to EC2 and are available at > > ami-3392b55a : us-east-1 image for i386 ami-f794b39e : us-east-1 image for > x86_64 > > > I ran basic tests agains them and they're ok. The only issue I still see > is wrong SELinux context for several files: > > # restorecon -Rvn -e/dev -e/proc -e/sys -e/run -e/tmp/ / restorecon reset > /var/cache/yum context > system_u:object_r:file_t:s0->system_u:object_r:rpm_var_cache_t:s0 > restorecon reset /var/log/boot.log context > system_u:object_r:var_log_t:s0->system_u:object_r:plymouthd_var_log_t:s0 > restorecon reset /boot/extlinux/ldlinux.sys context > system_u:object_r:file_t:s0->system_u:object_r:boot_t:s0 > > These should be opened as a bug in anaconda. (The file_t ones anyways.) > > > -- Sent from my Android device with K-9 Mail. Please excuse my brevity. > > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlKOSb4ACgkQrlYvE4MpobPBUACgsHbZ6R6ie+Co0m2STvpD73Xx HRMAoLZ604yqAErwiW4m7rhLWa0JuadR =2+91 -----END PGP SIGNATURE----- -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
