[Spice-devel] [ovirt-users] USB redirection

[René Koch]

On 06/03/2014 02:29 PM, Marian Krcmarik wrote:
>
>
> ----- Original Message -----
>> From: "René Koch" <rkoch at linuxland.at>
>> To: "Marian Krcmarik" <mkrcmari at redhat.com>
>> Cc: "Christophe Fergeau" <cfergeau at redhat.com>, "spice-devel" <spice-devel at lists.freedesktop.org>, Users at ovirt.org
>> Sent: Tuesday, June 3, 2014 1:56:36 PM
>> Subject: Re: [Spice-devel] [ovirt-users]   USB redirection
>>
>>
>> On 06/03/2014 12:47 PM, Marian Krcmarik wrote:
>>>
>>>
>>> ----- Original Message -----
>>>> From: "René Koch" <rkoch at linuxland.at>
>>>> To: "Christophe Fergeau" <cfergeau at redhat.com>
>>>> Cc: "spice-devel" <spice-devel at lists.freedesktop.org>, Users at ovirt.org
>>>> Sent: Tuesday, June 3, 2014 12:10:42 PM
>>>> Subject: Re: [Spice-devel] [ovirt-users]   USB redirection
>>>>
>>>> On 06/03/2014 11:53 AM, Christophe Fergeau wrote:
>>>>> On Tue, Jun 03, 2014 at 10:58:55AM +0200, René Koch wrote:
>>>>>> Btw, I also figured out that Fedora 20 (the client) blocks USB
>>>>>> redirection
>>>>>> if you have SELinux on enforcing - setting it to permissive works.
>>>>>
>>>>> I don't think this is intentional. Can you report it on
>>>>> bugzilla.redhat.com if this is happening on an up-to-date f20?
>>>>
>>>> Done: https://bugzilla.redhat.com/show_bug.cgi?id=1104110
>>> Rene,
>>> What's the value of mozilla_plugin_use_spice sebool - "getsebool
>>> mozilla_plugin_use_spice"? Make it on if it's off - "setsebool -P
>>> mozilla_plugin_use_spice on"
>>> If This is the problem It should be solved in
>>> selinux-policy-3.12.1-116.fc20
>>> (https://bugzilla.redhat.com/show_bug.cgi?id=1049491)
>>
>> It's off.
>> Setting it to on did solve the issue.
>>
>> I have selinux-policy-3.12.1-166.fc20.noarch installed. Is it intended
>> that the boolean is still off? I'm not aware of the SELinux update
>> policy if activating booleans is allowed or not. For this issue it would
>> be good, but on the other hand if I change it manually (for whatever
>> reason) I wouldn't want it to be changed by the package...
> The policy is to keep the currently set value - the value is not being reset to the new default when updating the selinux policy (as you assumed). So if you did update It should be still off.

Ok, thanks for the information.
I did add the solution (set boolean manually to on) to the bug report 
and closed it.


Regards,
René


>>
>>>>
>>>>>
>>>>> Christophe
>>>>>
>>>> _______________________________________________
>>>> Spice-devel mailing list
>>>> Spice-devel at lists.freedesktop.org
>>>> http://lists.freedesktop.org/mailman/listinfo/spice-devel
>>>>
>>