On 03/17/2014 05:44 AM, Sven Kieske wrote:
Hi,
what I really do not understand how could it be an issue
if server 1 runs in permissive mode while server 2
runs in disabled mode?
server 1 just logs selinux violations, how should this
prevent anything?
iirc, libvirt fails the selinux operations on the target host.
Am 16.03.2014 23:44, schrieb Dan Kenigsberg:
> On Thu, Mar 13, 2014 at 12:39:24PM -0400, Hans-Joachim wrote:
>> Hello,
>>
>> Thank you for your help.
>>
>> finally, it was a mismatch between a server running in SE permissive mode and a
server running in disabled mode.
>
> Yet another reminder that we should implement
>
> 894084 [RFE] engine should check and enforce selinux state in
> cluster policies
>
> Having Vdsm report selinux state (disabled/enforcing/permissive) in
> getVdsCaps should be a piece of cake.