From 9e877585e213a9fccec8ff9b3dcb876b2ec65696 Mon Sep 17 00:00:00 2001 From: Rob Crittenden Date: Thu, 31 May 2012 13:59:33 +0200 Subject: If SELinux is enabled ensure we also have restorecon. We don't have a specific requires on the policycoreutils package. It gets pulled in as a dependency on the server anyway, but checking there is like a belt and suspenders. On the client we don't require SELinux at all. If SELinux is enabled however we need to set things up properly. This is provided by the policycoreutils package so fail if that isn't available. https://fedorahosted.org/freeipa/ticket/2368 --- install/tools/ipa-replica-install | 1 + install/tools/ipa-server-install | 2 ++ 2 files changed, 3 insertions(+) (limited to 'install/tools') diff --git a/install/tools/ipa-replica-install b/install/tools/ipa-replica-install index 7cfe7627..f0c67e00 100755 --- a/install/tools/ipa-replica-install +++ b/install/tools/ipa-replica-install @@ -276,6 +276,7 @@ def check_bind(): sys.exit(1) def main(): + ipaservices.check_selinux_status() safe_options, options, filename = parse_options() standard_logging_setup("/var/log/ipareplica-install.log", debug=options.debug) root_logger.debug('%s was invoked with argument "%s" and options: %s' % (sys.argv[0], filename, safe_options)) diff --git a/install/tools/ipa-server-install b/install/tools/ipa-server-install index 2f06a9e8..e7b82364 100755 --- a/install/tools/ipa-server-install +++ b/install/tools/ipa-server-install @@ -539,6 +539,8 @@ def main(): if os.getegid() != 0: sys.exit("Must be root to set up server") + ipaservices.check_selinux_status() + signal.signal(signal.SIGTERM, signal_handler) signal.signal(signal.SIGINT, signal_handler) -- cgit