https://bugzilla.redhat.com/show_bug.cgi?id=1424823
--- Comment #8 from Randy Barlow <randy(a)electronsweatshop.com> ---
I've got my server manually patched with parts of the patch I attached[0] on
this ticket, as well as a manually installed version of the selinux policies.
Assuming my selinux patches have been released to F26 (which again, I don't
know how to verify other than just trying it?), there are two things you can do
manually that I think will get you running:
0) Edit the service file (/usr/lib/systemd/system/ejabberd.service) to do what
I did in the patch[0]. This will get ejabberd to run as ejabberd_t instead of
init_t, since it won't launch as bash anymore.
1) Unapply the policykit patch to /usr/bin/ejabberdctl, which basically means
changing the shebang line back to /usr/bin/bash. I wasn't able to get ejabberd
working with polkit *and* SELinux. I am on the fence about the value of
policykit for ejabberd anyway, when you can use sudo to grant access to users.
Hopefully I will find some non-dayjob time soon to do the above to the real
package so we can be back in business. I also need to finish updating ejabberd
to the newer release in rawhide...
[0]
https://bugzilla.redhat.com/attachment.cgi?id=1268991&action=diff
[1]
https://src.fedoraproject.org/rpms/ejabberd/blob/master/f/ejabberd-0002-E...
--
You are receiving this mail because:
You are on the CC list for the bug.