[ovirt-users] SELinux and oVirt

Michal Skrivanek michal.skrivanek at redhat.com
Wed May 11 13:14:54 UTC 2016


> On 11 May 2016, at 15:02, Cam Mac <iucounu at gmail.com> wrote:
> 
> Hi,
> 
> In the oVirt guide, it says that "SELinux is being used by default on oVirt Node", but then goes on to say that if you have problems you should set it to permissive mode. I have had a few things fail due to being blocked by SELinux on a node I later enabled SELinux on, as it was off at install time. The other node which has had SELinux on from the start and so far has not had any oVirt operations blocked. I am guessing that the oVirt install process creates the necessary rules to allow vdsm to run under SELinux. So if you want to set SELinux to enforcing after installation, is there a script to do this, or is it better to just reinstall the node or engine, rather than trying to work out the individual exceptions?

For oVirt node it’s easier to reinstall it, it doesn’t persist much and it’s the easies way how to get the labelling right

Thanks,
michal

> 
> Thanks,
> 
> Cam
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users




More information about the Users mailing list