Re: [ovirt-users] [Spice-devel] USB redirection
----- Original Message -----
From: "René Koch" <rkoch@linuxland.at> To: "Marian Krcmarik" <mkrcmari@redhat.com> Cc: "Christophe Fergeau" <cfergeau@redhat.com>, "spice-devel" <spice-devel@lists.freedesktop.org>, Users@ovirt.org Sent: Tuesday, June 3, 2014 1:56:36 PM Subject: Re: [Spice-devel] [ovirt-users] USB redirection
On 06/03/2014 12:47 PM, Marian Krcmarik wrote:
----- Original Message -----
From: "René Koch" <rkoch@linuxland.at> To: "Christophe Fergeau" <cfergeau@redhat.com> Cc: "spice-devel" <spice-devel@lists.freedesktop.org>, Users@ovirt.org Sent: Tuesday, June 3, 2014 12:10:42 PM Subject: Re: [Spice-devel] [ovirt-users] USB redirection
On 06/03/2014 11:53 AM, Christophe Fergeau wrote:
On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote:
Btw, I also figured out that Fedora 20 (the client) blocks USB redirection if you have SELinux on enforcing - setting it to permissive works.
I don't think this is intentional. Can you report it on bugzilla.redhat.com if this is happening on an up-to-date f20?
Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110 Rene, What's the value of mozilla_plugin_use_spice sebool - "getsebool mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P mozilla_plugin_use_spice on" If This is the problem It should be solved in selinux-policy-3.12.1-116.fc20 (https://bugzilla.redhat.com/show_bug.cgi?id=1049491)
It's off. Setting it to on did solve the issue.
I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended that the boolean is still off? I'm not aware of the SELinux update policy if activating booleans is allowed or not. For this issue it would be good, but on the other hand if I change it manually (for whatever reason) I wouldn't want it to be changed by the package... The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off.
Christophe
_______________________________________________ Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
On 06/03/2014 02:29 PM, Marian Krcmarik wrote:
----- Original Message -----
From: "René Koch" <rkoch@linuxland.at> To: "Marian Krcmarik" <mkrcmari@redhat.com> Cc: "Christophe Fergeau" <cfergeau@redhat.com>, "spice-devel" <spice-devel@lists.freedesktop.org>, Users@ovirt.org Sent: Tuesday, June 3, 2014 1:56:36 PM Subject: Re: [Spice-devel] [ovirt-users] USB redirection
On 06/03/2014 12:47 PM, Marian Krcmarik wrote:
----- Original Message -----
From: "René Koch" <rkoch@linuxland.at> To: "Christophe Fergeau" <cfergeau@redhat.com> Cc: "spice-devel" <spice-devel@lists.freedesktop.org>, Users@ovirt.org Sent: Tuesday, June 3, 2014 12:10:42 PM Subject: Re: [Spice-devel] [ovirt-users] USB redirection
On 06/03/2014 11:53 AM, Christophe Fergeau wrote:
On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote:
Btw, I also figured out that Fedora 20 (the client) blocks USB redirection if you have SELinux on enforcing - setting it to permissive works.
I don't think this is intentional. Can you report it on bugzilla.redhat.com if this is happening on an up-to-date f20?
Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110 Rene, What's the value of mozilla_plugin_use_spice sebool - "getsebool mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P mozilla_plugin_use_spice on" If This is the problem It should be solved in selinux-policy-3.12.1-116.fc20 (https://bugzilla.redhat.com/show_bug.cgi?id=1049491)
It's off. Setting it to on did solve the issue.
I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended that the boolean is still off? I'm not aware of the SELinux update policy if activating booleans is allowed or not. For this issue it would be good, but on the other hand if I change it manually (for whatever reason) I wouldn't want it to be changed by the package... The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off.
Ok, thanks for the information. I did add the solution (set boolean manually to on) to the bug report and closed it. Regards, René
Christophe
_______________________________________________ Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
participants (2)
-
Marian Krcmarik -
René Koch