----- Original Message ----- > From: "René Koch" <rkoch@xxxxxxxxxxxx> > To: "Marian Krcmarik" <mkrcmari@xxxxxxxxxx> > Cc: "Christophe Fergeau" <cfergeau@xxxxxxxxxx>, "spice-devel" <spice-devel@xxxxxxxxxxxxxxxxxxxxx>, Users@xxxxxxxxx > Sent: Tuesday, June 3, 2014 1:56:36 PM > Subject: Re: [ovirt-users] USB redirection > > > On 06/03/2014 12:47 PM, Marian Krcmarik wrote: > > > > > > ----- Original Message ----- > >> From: "René Koch" <rkoch@xxxxxxxxxxxx> > >> To: "Christophe Fergeau" <cfergeau@xxxxxxxxxx> > >> Cc: "spice-devel" <spice-devel@xxxxxxxxxxxxxxxxxxxxx>, Users@xxxxxxxxx > >> Sent: Tuesday, June 3, 2014 12:10:42 PM > >> Subject: Re: [ovirt-users] USB redirection > >> > >> On 06/03/2014 11:53 AM, Christophe Fergeau wrote: > >>> On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote: > >>>> Btw, I also figured out that Fedora 20 (the client) blocks USB > >>>> redirection > >>>> if you have SELinux on enforcing - setting it to permissive works. > >>> > >>> I don't think this is intentional. Can you report it on > >>> bugzilla.redhat.com if this is happening on an up-to-date f20? > >> > >> Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110 > > Rene, > > What's the value of mozilla_plugin_use_spice sebool - "getsebool > > mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P > > mozilla_plugin_use_spice on" > > If This is the problem It should be solved in > > selinux-policy-3.12.1-116.fc20 > > (https://bugzilla.redhat.com/show_bug.cgi?id=1049491) > > It's off. > Setting it to on did solve the issue. > > I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended > that the boolean is still off? I'm not aware of the SELinux update > policy if activating booleans is allowed or not. For this issue it would > be good, but on the other hand if I change it manually (for whatever > reason) I wouldn't want it to be changed by the package... The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off. > > >> > >>> > >>> Christophe > >>> > >> _______________________________________________ > >> Spice-devel mailing list > >> Spice-devel@xxxxxxxxxxxxxxxxxxxxx > >> http://lists.freedesktop.org/mailman/listinfo/spice-devel > >> > _______________________________________________ Spice-devel mailing list Spice-devel@xxxxxxxxxxxxxxxxxxxxx http://lists.freedesktop.org/mailman/listinfo/spice-devel