[Spice-devel] [ovirt-users] USB redirection

[Marian Krcmarik]

----- Original Message -----
> From: "René Koch" <rkoch at linuxland.at>
> To: "Marian Krcmarik" <mkrcmari at redhat.com>
> Cc: "Christophe Fergeau" <cfergeau at redhat.com>, "spice-devel" <spice-devel at lists.freedesktop.org>, Users at ovirt.org
> Sent: Tuesday, June 3, 2014 1:56:36 PM
> Subject: Re: [Spice-devel] [ovirt-users]   USB redirection
> 
> 
> On 06/03/2014 12:47 PM, Marian Krcmarik wrote:
> >
> >
> > ----- Original Message -----
> >> From: "René Koch" <rkoch at linuxland.at>
> >> To: "Christophe Fergeau" <cfergeau at redhat.com>
> >> Cc: "spice-devel" <spice-devel at lists.freedesktop.org>, Users at ovirt.org
> >> Sent: Tuesday, June 3, 2014 12:10:42 PM
> >> Subject: Re: [Spice-devel] [ovirt-users]   USB redirection
> >>
> >> On 06/03/2014 11:53 AM, Christophe Fergeau wrote:
> >>> On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote:
> >>>> Btw, I also figured out that Fedora 20 (the client) blocks USB
> >>>> redirection
> >>>> if you have SELinux on enforcing - setting it to permissive works.
> >>>
> >>> I don't think this is intentional. Can you report it on
> >>> bugzilla.redhat.com if this is happening on an up-to-date f20?
> >>
> >> Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110
> > Rene,
> > What's the value of mozilla_plugin_use_spice sebool - "getsebool
> > mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P
> > mozilla_plugin_use_spice on"
> > If This is the problem It should be solved in
> > selinux-policy-3.12.1-116.fc20
> > (https://bugzilla.redhat.com/show_bug.cgi?id=1049491)
> 
> It's off.
> Setting it to on did solve the issue.
> 
> I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended
> that the boolean is still off? I'm not aware of the SELinux update
> policy if activating booleans is allowed or not. For this issue it would
> be good, but on the other hand if I change it manually (for whatever
> reason) I wouldn't want it to be changed by the package...
The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off.
> 
> >>
> >>>
> >>> Christophe
> >>>
> >> _______________________________________________
> >> Spice-devel mailing list
> >> Spice-devel at lists.freedesktop.org
> >> http://lists.freedesktop.org/mailman/listinfo/spice-devel
> >>
>