search for: checkpolicy

These patches update the example FLASK policy shipped with Xen and enable its build if the required tools are present. The third patch requires rerunning autoconf to update tools/configure. [PATCH 1/3] flask/policy: sort dom0 accesses [PATCH 2/3] flask/policy: rework policy build system [PATCH 3/3] tools/flask: add FLASK policy to build

...S 6.0 on 2 different x86_64 boxen. Both originally had selinux installed and enabled. I never touched selinux other than to remove as much of it as I could via rpm -e. As far as I can tell, here are the remaining packages that have something to do with it: # rpm -qa | grep -iE 'sel|pol' checkpolicy-2.0.22-1.el6.x86_64 libselinux-2.0.94-2.el6.x86_64 libsepol-2.0.41-3.el6.x86_64 polkit-0.96-2.el6_0.1.x86_64 # Both boxen have those packages. However: 1) box1 still has files in /selinux whereas box2's /selinux is empty; 2) ls -l on box1 shows a '.' at the end of file/directory, whi...

...mon-blacklist.ks +++ b/common-blacklist.ks @@ -10,7 +10,7 @@ echo "Removing excess RPMs" RPMS="system-config-firewall-tui system-config-network-tui rhpl \ rpm-python dbus-python kudzu newt-python newt libsemanage-python" -RPMS="$RPMS kpartx mkinitrd isomd5sum dmraid checkpolicy" +RPMS="$RPMS mkinitrd isomd5sum dmraid checkpolicy" # Remove additional RPMs forcefully RPMS="$RPMS gamin pm-utils kbd usermode vbetool ConsoleKit hdparm \ diff --git a/common-pkgs.ks b/common-pkgs.ks index cc507cf..f53131f 100644 --- a/common-pkgs.ks +++ b/common-pkgs.ks @...

Hi, just to avoid re-inventing the wheel, is there any document that can help me reduce even further a "minimum" installation of Centos 4.4 (BTW can you say 600mb is minimum)? I am in the process of creating a small Centos-4.4-based Asterisk box and I need to boot it from a CF card. Deleting useless packages will help me do what i want. Example: even a minimum install of Centos 4.4 (or

Hi, just to avoid re-inventing the wheel, is there any document that can help me reduce even further a "minimum" installation of Centos 4.4 (BTW can you say 600mb is minimum)? I am in the process of creating a small Centos-4.4-based Asterisk box and I need to boot it from a CF card. Deleting useless packages will help me do what i want. Example: even a minimum install of Centos 4.4 (or

...d of <sign_socket_context> on the files. I run a Samba container and those are different contexts than your specific Samba AD installation (compiled or 3rd party RPM) Run make to build the SELinux module Note: https://stopdisablingselinux.com/ :-) You will need policycoreutils-python and checkpolicy in order to be able to build the SELinux module ==================== Makefile ======================== module: checkmodule -M -m -o local.mod local.te semodule_package -o local.pp -m local.mod semodule -i local.pp ==================== local.te ======================== module local 1.0; requ...

This patch goes with the node patch just sent, and is ready for pushing upstream. I'll be doing the blacklisting in a later patch once this is upstream.

This patch removes the attempt at setting nodeadmin to be root's shell.

The purpose of this patch is to add the matahari qmf agent package (http://git.et.redhat.com/?p=matahari.git;a=summary) to the node image. Matahari is a qmf agent that publishes hardware information to an amqp broker, replacing functionality from ovirt-identify-node. However, since the capability is not ovirt specific, the agent is maintained as a separate project (see link above). Dependencies

...le -Group: System Environment/Base -Obsoletes: redhat-release -Provides: redhat-release -%description release -%{product_family} release files. - -%package selinux -Summary: SELinux policy module supporting ovirt-node -Group: System Environment/Base +# selunx-stuff BuildRequires: checkpolicy, selinux-policy-devel, hardlink %if "%{selinux_policyver}" != "" Requires: selinux-policy >= %{selinux_policyver} %endif -Requires: %{name} = %{version}-%{release} Requires(post): /usr/sbin/semodule, /sbin/restorecon Requires(postun): /usr/sbin/semodule, /s...

hi, i want set selinux to usw with ntpd but when i run (as described in wiki) semanage -a -t ntpd_t "/usr/local/samba/var/lib/ntp_signd" i have that error " usage: semanage [-h] {import,export,login,user,port,ibpkey,ibendport,interface,module,node,fcontext,boolean,permissive,dontaudit} ... semanage: error: argument subcommand: invalid choice:

...nitlabel part / --asprimary --fstype="ext3" --grow --maxsize=1000 --size=1 # Repositories url --url="http://mirrors.kernel.org/centos/6.0/os/x86_64/" %packages --excludedocs --nobase --instLangs=en @Core %post rpm -e $(rpm -qa |grep -i firmware) yum -y remove audit authconfig checkpolicy libsemanage libselinux-utils policycoreutils selinux-policy selinux-policy-targeted rm -rf /etc/selinux/targeted rpm -e --nodeps redhat-logos %end

...audit audit-libs -audit-libs-python authconfig autoconf -autofs automake automake17 -avahi -avahi-glib basesystem bash bc beecrypt bind-libs bind-utils binutils bison blas -bluez-gnome -bluez-libs -bluez-utils booty byacc bzip2 bzip2-devel bzip2-libs -cairo ccid centos-release centos-release-notes -checkpolicy chkconfig chkfontpath cman compat-db compat-gcc-34 compat-gcc-34-c++ compat-glibc compat-glibc-headers compat-libgcc-296 compat-libstdc++-296 compat-libstdc++-33 compat-openldap compat-readline43 compat-slang comps-extras -conman -coolkey coreutils cpio cpp cpuspeed cracklib cracklib-dicts crash cr...

...++++++++++++++++++++ 6 files changed, 110 insertions(+), 7 deletions(-) diff --git a/recipe/common-blacklist.ks b/recipe/common-blacklist.ks index 7c08c39..4fb980e 100644 --- a/recipe/common-blacklist.ks +++ b/recipe/common-blacklist.ks @@ -15,7 +15,7 @@ RPMS="$RPMS mkinitrd isomd5sum dmraid checkpolicy" # Remove additional RPMs forcefully RPMS="$RPMS gamin pm-utils kbd usermode vbetool ConsoleKit hdparm \ efibootmgr linux-atm-libs fedora-release-notes \ - cryptsetup-luks pciutils mtools syslinux \ + pciutils mtools syslinux \ wireless-tools radeontool libicu gnupg2 \...

The following patches introduce support for multipath and cciss devices to the ovirt-node and node-image. Comments are appreciated. These patches assume that the 3 patches (2 node, 1 node-image) from Joey are all incorporated. Mike

...there any idea why Samba does not join the domain in the DC role? By the way, to compile samba us need packages bind-utils libblkid-devel libsemanage-python libxml2-devel perl- Test-Base policycoreutils-python gcc gdb openldap-devel python- devel readline-devel audit-lib s- python checkpolicy libcgroup libselinux-python libselinux- utils mailcap perl-Algorithm-Diff perl-Archive-Extract perl- Archive-Zip perl-Business-ISBN perl-Bus iness-ISBN-Data perl- CPAN perl-CPAN-Meta perl-CPAN-Meta-Requirements perl-CPAN-Meta- YAML perl-CPANPLUS perl-Compress-Raw-Bzip2 perl-Compr...

samba-tool domain join example.ru DC --server=srv-dc01.example.ru --username=vas.lah --password=password --realm=EXAMPLE.RU --site=SITE2 -d 1 > /tmp/log.txt 2>&1 --------- config --------- workgroup is EXAMPLE realm is example.ru Looking up IPv4 addresses Looking up IPv6 addresses No IPv6 address will be assigned Setting up secrets.ldb Setting up the registry Setting up the privileges

...5 set to be updated ---> Package ltrace.i386 0:0.5-7.45svn.el5 set to be updated ---> Package gnome-python2-gtkhtml2.i386 0:2.14.2-6.el5 set to be updated ---> Package php-xml.i386 0:5.1.6-20.el5 set to be updated ---> Package kudzu.i386 0:1.2.57.1.17-1 set to be updated ---> Package checkpolicy.i386 0:1.33.1-4.el5 set to be updated ---> Package audit.i386 0:1.6.5-9.el5 set to be updated ---> Package libgomp.i386 0:4.1.2-42.el5 set to be updated ---> Package libvirt-python.i386 0:0.3.3-7.el5 set to be updated ---> Package libraw1394.i386 0:1.3.0-1.el5 set to be updated --->...

....el6.centos.1.x86_64 lua-5.1.4-4.1.el6.x86_64 libsepol-devel-2.0.41-4.el6.x86_64 cyrus-sasl-lib-2.1.23-15.el6_6.1.x86_64 keyutils-libs-devel-1.4-5.el6.x86_64 glusterfs-libs-3.6.0.29-2.el6.x86_64 findutils-4.4.2-6.el6.x86_64 libcurl-devel-7.41.0-1.0.cf.rhel6.x86_64 libcgroup-0.40.rc1-15.el6_6.x86_64 checkpolicy-2.0.22-1.el6.x86_64 xz-libs-5.0.3-2.0.cf.el6.x86_64 lzo-2.03-3.1.el6_5.1.x86_64 man-pages-overrides-6.6.3-2.el6.noarch libgpg-error-devel-1.17-2.0.cf.rhel6.x86_64 libSM-1.2.1-2.el6.x86_64 tcpdump-4.0.0-3.20090921gitdf3cb4.2.el6.x86_64 perl-Compress-Raw-Bzip2-2.068-1.rhel6.x86_64 glusterfs-3.6.0.29-...

...86_64 > libsepol-devel-2.0.41-4.el6.x86_64 > cyrus-sasl-lib-2.1.23-15.el6_6.1.x86_64 > keyutils-libs-devel-1.4-5.el6.x86_64 > glusterfs-libs-3.6.0.29-2.el6.x86_64 > findutils-4.4.2-6.el6.x86_64 > libcurl-devel-7.41.0-1.0.cf.rhel6.x86_64 > libcgroup-0.40.rc1-15.el6_6.x86_64 > checkpolicy-2.0.22-1.el6.x86_64 > xz-libs-5.0.3-2.0.cf.el6.x86_64 > lzo-2.03-3.1.el6_5.1.x86_64 > man-pages-overrides-6.6.3-2.el6.noarch > libgpg-error-devel-1.17-2.0.cf.rhel6.x86_64 > libSM-1.2.1-2.el6.x86_64 > tcpdump-4.0.0-3.20090921gitdf3cb4.2.el6.x86_64 > perl-Compress-Raw-Bzip2-2.068...