Re: [ovirt-users] [Spice-devel] USB redirection
----- Original Message -----
From: "René Koch" <rkoch(a)linuxland.at>
To: "Marian Krcmarik" <mkrcmari(a)redhat.com>
Cc: "Christophe Fergeau" <cfergeau(a)redhat.com>, "spice-devel"
<spice-devel(a)lists.freedesktop.org>, Users(a)ovirt.org
Sent: Tuesday, June 3, 2014 1:56:36 PM
Subject: Re: [Spice-devel] [ovirt-users] USB redirection
On 06/03/2014 12:47 PM, Marian Krcmarik wrote:
>
>
> ----- Original Message -----
>> From: "René Koch" <rkoch(a)linuxland.at>
>> To: "Christophe Fergeau" <cfergeau(a)redhat.com>
>> Cc: "spice-devel" <spice-devel(a)lists.freedesktop.org>,
Users(a)ovirt.org
>> Sent: Tuesday, June 3, 2014 12:10:42 PM
>> Subject: Re: [Spice-devel] [ovirt-users] USB redirection
>>
>> On 06/03/2014 11:53 AM, Christophe Fergeau wrote:
>>> On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote:
>>>> Btw, I also figured out that Fedora 20 (the client) blocks USB
>>>> redirection
>>>> if you have SELinux on enforcing - setting it to permissive works.
>>>
>>> I don't think this is intentional. Can you report it on
>>> bugzilla.redhat.com if this is happening on an up-to-date f20?
>>
>> Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110
> Rene,
> What's the value of mozilla_plugin_use_spice sebool - "getsebool
> mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P
> mozilla_plugin_use_spice on"
> If This is the problem It should be solved in
> selinux-policy-3.12.1-116.fc20
> (https://bugzilla.redhat.com/show_bug.cgi?id=1049491)
It's off.
Setting it to on did solve the issue.
I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended
that the boolean is still off? I'm not aware of the SELinux update
policy if activating booleans is allowed or not. For this issue it would
be good, but on the other hand if I change it manually (for whatever
reason) I wouldn't want it to be changed by the package...
The policy is to
keep the currently set value - the value is not being reset to the new default when
updating the selinux policy (as you assumed). So if you did update It should be still
off.
>>
>>>
>>> Christophe
>>>
>> _______________________________________________
>> Spice-devel mailing list
>> Spice-devel(a)lists.freedesktop.org
>> http://lists.freedesktop.org/mailman/listinfo/spice-devel
>>