Re: Re: cf-key --show-hosts: output almost empty
| Newsgroups | gmane.comp.sysutils.cfengine.general |
|---|---|
| Message-ID | <[email protected]> |
To confirm: this was a local SELinux issue. Vratislav: Oh! Now that is interesting! We had always been on 3.10. And, of relevance here, we had been using a ".pp" whose origins were lost in the mists of time past. We have been gradually moving to 3.12 (now complete) and meanwhile trying 3.15 specifically on RHEL8. That 3.15/RHEL8 had given us many additional SELinux messages which that local, historic ".pp" file was failing to catch. So I developed some additional rules to cover them. But I had not realised that quietly, oh so quietly, 3.15 had also introduced the inclusion of a ".pp" file itself. So that piece of information about this addition of the ".pp" file with 3.15 is very useful! I will most certainly be investigating that. Thank you! -- David Lee On Tuesday, 26 October 2021 at 10:40:41 UTC+1 [email protected] wrote: > On Fri, 2021-10-22 at 03:48 -0700, [email protected] wrote: > > Ah! This may be a local problem. We run SELinux enforcing, and on this > particular hub I'm seeing > > log messages about "SELinux...cf_lastseen.lmdb". > These should actually not be showing up. Do you have the > 'cfengine-enterprise' SELinux module > loaded? It's in /var/cfengine/selinux/cfengine-enterprise.pp. > > -- > Vratislav > > -- You received this message because you are subscribed to the Google Groups "help-cfengine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/help-cfengine/5a2a4725-ef92-4fd9-94c0-d803453ded49n%40googlegroups.com.