diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2012-05-31 13:59:33 +0200 |
|---|---|---|
| committer | Martin Kosek <mkosek@redhat.com> | 2012-05-31 14:07:05 +0200 |
| commit | 9e877585e213a9fccec8ff9b3dcb876b2ec65696 (patch) | |
| tree | ea25cb0bb60302b5f2564685539ea1bdcd5b974a /install | |
| parent | 5b465811ce15e26d4c05c589601eebee1b9e984d (diff) | |
| download | freeipa-9e877585e213a9fccec8ff9b3dcb876b2ec65696.tar.gz freeipa-9e877585e213a9fccec8ff9b3dcb876b2ec65696.tar.xz freeipa-9e877585e213a9fccec8ff9b3dcb876b2ec65696.zip | |
If SELinux is enabled ensure we also have restorecon.
We don't have a specific requires on the policycoreutils package. It
gets pulled in as a dependency on the server anyway, but checking
there is like a belt and suspenders.
On the client we don't require SELinux at all. If SELinux is enabled
however we need to set things up properly. This is provided by the
policycoreutils package so fail if that isn't available.
https://fedorahosted.org/freeipa/ticket/2368
Diffstat (limited to 'install')
| -rwxr-xr-x | install/tools/ipa-replica-install | 1 | ||||
| -rwxr-xr-x | install/tools/ipa-server-install | 2 |
2 files changed, 3 insertions, 0 deletions
diff --git a/install/tools/ipa-replica-install b/install/tools/ipa-replica-install index 7cfe7627e..f0c67e008 100755 --- a/install/tools/ipa-replica-install +++ b/install/tools/ipa-replica-install @@ -276,6 +276,7 @@ def check_bind(): sys.exit(1) def main(): + ipaservices.check_selinux_status() safe_options, options, filename = parse_options() standard_logging_setup("/var/log/ipareplica-install.log", debug=options.debug) root_logger.debug('%s was invoked with argument "%s" and options: %s' % (sys.argv[0], filename, safe_options)) diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install index 2f06a9e87..e7b82364a 100755 --- a/install/tools/ipa-server-install +++ b/install/tools/ipa-server-install @@ -539,6 +539,8 @@ def main(): if os.getegid() != 0: sys.exit("Must be root to set up server") + ipaservices.check_selinux_status() + signal.signal(signal.SIGTERM, signal_handler) signal.signal(signal.SIGINT, signal_handler) |