>> Indeed, I think it's usually recommended to run 'setenforce 0' before
>> you run the livecd-creator process. I don't have the URL from which
>> the OP was working, but if someone else does, could he or she please
>> insert that step? Thank you!
>
> I think I've been lucky in that I've never set SELinux to permissive
> mode while creating test day live images.
>
> However, if any adjustments to SELinux are needed for the running live
> image, my thought would be to run in permissive mode so we have a chance
> to capture and report AVC denials.
I've always created any livecd that I've needed on my laptop which
mostly runs with selinux in enforcing mode (only the stupid closed
source vpn client I need for work requires me to disable it) without
issue but I ran into an interesting problem the other day which I've
been meaning to report. When trying to automate the creation of a
livecd from a hosted server of mine running Fedora 11 with a provider
required kernel which doesn't have selinux I get the following error:
# livecd-creator --cache=/home/peter/cache -c
/home/peter/fedora/build/spin-kickstarts/fedora-livecd-sugar.ks
Traceback (most recent call last):
File "/usr/bin/livecd-creator", line 140, in <module>
sys.exit(main())
File "/usr/bin/livecd-creator", line 114, in main
creator = imgcreate.LiveImageCreator(ks, name, fs_label)
File "/usr/lib/python2.6/site-packages/imgcreate/live.py", line 47,
in __init__
LoopImageCreator.__init__(self, *args)
File "/usr/lib/python2.6/site-packages/imgcreate/creator.py", line
795, in __init__
ImageCreator.__init__(self, ks, name)
File "/usr/lib/python2.6/site-packages/imgcreate/creator.py", line
76, in __init__
self.__sanity_check()
File "/usr/lib/python2.6/site-packages/imgcreate/creator.py", line
404, in __sanity_check
raise CreatorError("SELinux requested but not enabled on host")
imgcreate.errors.CreatorError/usr/lib/python2.6/site-packages/imgcreate/errors.py:40:
DeprecationWarning: BaseException.message has been deprecated as of
Python 2.6
return str(self.message)
: SELinux requested but not enabled on host
--
fedora-test-list mailing list
fedora-test-list@xxxxxxxxxx
To unsubscribe:
https://www.redhat.com/mailman/listinfo/fedora-test-list
