Uploaded image for project: 'CFEngine Community'
  1. CFEngine Community
  2. CFE-3720

postinstall script should avoid failure related to selinux when setenforce is not 0

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Open
    • Priority: Medium
    • Resolution: Unresolved
    • Affects Version/s: 3.18.0
    • Fix Version/s: None
    • Component/s: Packaging
    • Labels:
      None
    • Story Points:
      2

      Description

      + command -v semodule
      + '[' -f /var/cfengine/selinux/cfengine-enterprise.pp ']'
      + semodule -n -i /var/cfengine/selinux/cfengine-enterprise.pp
      Failed to resolve permission compromise_kernel
      Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/400/cfengine-enterprise/cil:143
      semodule:  Failed!
      

      Vratislav Podzimek said:

      But the package is installed and after doing setenforce 0 I was able to bootstrap the host. For testing purposes it's probably OK to disable SELinux and if semodule is not present at the time the CFEngine package installation, there should be no scriptlet failure.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              a10042 Nick Anderson
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:

                Summary Panel