----- Original Message ----- > From: "René Koch" <rkoch(a)linuxland.at&gt; > To: "Marian Krcmarik" <mkrcmari(a)redhat.com&gt; > Cc: "Christophe Fergeau" <cfergeau(a)redhat.com&gt;, "spice-devel" <spice-devel(a)lists.freedesktop.org&gt;, Users(a)ovirt.org > Sent: Tuesday, June 3, 2014 1:56:36 PM > Subject: Re: [Spice-devel] [ovirt-users] USB redirection > > > On 06/03/2014 12:47 PM, Marian Krcmarik wrote: >> >> >> ----- Original Message ----- >>> From: "René Koch" <rkoch(a)linuxland.at&gt; >>> To: "Christophe Fergeau" <cfergeau(a)redhat.com&gt; >>> Cc: "spice-devel" <spice-devel(a)lists.freedesktop.org&gt;, Users(a)ovirt.org >>> Sent: Tuesday, June 3, 2014 12:10:42 PM >>> Subject: Re: [Spice-devel] [ovirt-users] USB redirection >>> >>> On 06/03/2014 11:53 AM, Christophe Fergeau wrote: >>>> On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote: >>>>> Btw, I also figured out that Fedora 20 (the client) blocks USB >>>>> redirection >>>>> if you have SELinux on enforcing - setting it to permissive works. >>>> >>>> I don't think this is intentional. Can you report it on >>>> bugzilla.redhat.com if this is happening on an up-to-date f20? >>> >>> Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110 >> Rene, >> What's the value of mozilla_plugin_use_spice sebool - "getsebool >> mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P >> mozilla_plugin_use_spice on" >> If This is the problem It should be solved in >> selinux-policy-3.12.1-116.fc20 >> (https://bugzilla.redhat.com/show_bug.cgi?id=1049491) > > It's off. > Setting it to on did solve the issue. > > I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended > that the boolean is still off? I'm not aware of the SELinux update > policy if activating booleans is allowed or not. For this issue it would > be good, but on the other hand if I change it manually (for whatever > reason) I wouldn't want it to be changed by the package... The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off.

> >>> >>>> >>>> Christophe >>>> >>> _______________________________________________ >>> Spice-devel mailing list >>> Spice-devel(a)lists.freedesktop.org >>> http://lists.freedesktop.org/mailman/listinfo/spice-devel >>> >