[Users] Failed to enable SELinux boolean
Hello, recent snapshot, engine-setup fails (selinux is disabled in the OS): 2012-06-05 03:34:26::DEBUG::setup_sequences::59::root:: running _configureSelinuxBoolean 2012-06-05 03:34:26::DEBUG::engine-setup::668::root:: Enable httpd_can_network_connect boolean 2012-06-05 03:34:26::DEBUG::common_utils::309::root:: Executing command --> '/usr/sbin/setsebool -P httpd_can_network_connect 1' 2012-06-05 03:34:26::DEBUG::common_utils::335::root:: output = 2012-06-05 03:34:26::DEBUG::common_utils::336::root:: stderr = setsebool: SELinux is disabled. 2012-06-05 03:34:26::DEBUG::common_utils::337::root:: retcode = 1 2012-06-05 03:34:26::DEBUG::setup_sequences::62::root:: Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/bin/engine-setup", line 670, in _configureSelinuxBoolean out, rc = utils.execCmd(cmd, None, True, output_messages.ERR_FAILED_UPDATING_SELINUX_BOOLEAN) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 340, in execCmd raise Exception(msg) Exception: Failed to enable SELinux boolean Regards, Nerijus
Hi, I guess that if you enable selinux then setup runs positively ? Can you verify that? Please run: getenforce, of it's disabled, edit /etc/sysconfig/selinux ang change to enforcing, reboot the machine, re-run setup. Haim On Jun 5, 2012, at 0:50, Nerijus Baliunas <nerijus@users.sourceforge.net> wrote:
Hello,
recent snapshot, engine-setup fails (selinux is disabled in the OS):
2012-06-05 03:34:26::DEBUG::setup_sequences::59::root:: running _configureSelinuxBoolean 2012-06-05 03:34:26::DEBUG::engine-setup::668::root:: Enable httpd_can_network_connect boolean 2012-06-05 03:34:26::DEBUG::common_utils::309::root:: Executing command --> '/usr/sbin/setsebool -P httpd_can_network_connect 1' 2012-06-05 03:34:26::DEBUG::common_utils::335::root:: output = 2012-06-05 03:34:26::DEBUG::common_utils::336::root:: stderr = setsebool: SELinux is disabled.
2012-06-05 03:34:26::DEBUG::common_utils::337::root:: retcode = 1 2012-06-05 03:34:26::DEBUG::setup_sequences::62::root:: Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/bin/engine-setup", line 670, in _configureSelinuxBoolean out, rc = utils.execCmd(cmd, None, True, output_messages.ERR_FAILED_UPDATING_SELINUX_BOOLEAN) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 340, in execCmd raise Exception(msg) Exception: Failed to enable SELinux boolean
Regards, Nerijus _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
That's a known issue. we should run semanage instead of sebool, so it won't fail if selinux is disabled. Currently, you can run setup only when selinux is enabled. Thanks, Ofer ----- Original Message -----
Hello,
recent snapshot, engine-setup fails (selinux is disabled in the OS):
2012-06-05 03:34:26::DEBUG::setup_sequences::59::root:: running _configureSelinuxBoolean 2012-06-05 03:34:26::DEBUG::engine-setup::668::root:: Enable httpd_can_network_connect boolean 2012-06-05 03:34:26::DEBUG::common_utils::309::root:: Executing command --> '/usr/sbin/setsebool -P httpd_can_network_connect 1' 2012-06-05 03:34:26::DEBUG::common_utils::335::root:: output = 2012-06-05 03:34:26::DEBUG::common_utils::336::root:: stderr = setsebool: SELinux is disabled.
2012-06-05 03:34:26::DEBUG::common_utils::337::root:: retcode = 1 2012-06-05 03:34:26::DEBUG::setup_sequences::62::root:: Traceback (most recent call last): File "/usr/share/ovirt-engine/scripts/setup_sequences.py", line 60, in run function() File "/usr/bin/engine-setup", line 670, in _configureSelinuxBoolean out, rc = utils.execCmd(cmd, None, True, output_messages.ERR_FAILED_UPDATING_SELINUX_BOOLEAN) File "/usr/share/ovirt-engine/scripts/common_utils.py", line 340, in execCmd raise Exception(msg) Exception: Failed to enable SELinux boolean
Regards, Nerijus _______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
On Tue, 05 Jun 2012 05:19:29 -0400 (EDT) Ofer Schreiber <oschreib@redhat.com> wrote:
That's a known issue. we should run semanage instead of sebool, so it won't fail if selinux is disabled.
Currently, you can run setup only when selinux is enabled.
I used the following patch for now: --- engine-setup.py.orig 2012-05-28 17:17:25.000000000 +0300 +++ engine-setup.py 2012-06-05 03:43:04.407580636 +0300 @@ -666,8 +666,8 @@ def _configureSelinuxBoolean(): logging.debug("Enable httpd_can_network_connect boolean") - cmd = [basedefs.EXEC_SETSEBOOL,"-P","httpd_can_network_connect","1"] - out, rc = utils.execCmd(cmd, None, True, output_messages.ERR_FAILED_UPDATING_SELINUX_BOOLEAN) + #cmd = [basedefs.EXEC_SETSEBOOL,"-P","httpd_can_network_connect","1"] + #out, rc = utils.execCmd(cmd, None, True, output_messages.ERR_FAILED_UPDATING_SELINUX_BOOLEAN) def _configureHttpdSslKeys(): try:
participants (3)
-
Haim Ateya -
Nerijus Baliunas -
Ofer Schreiber