HomeDevCentral

Apply SELinux context type recursively to /var/log/www

Description

Apply SELinux context type recursively to /var/log/www

Summary:
When restarting nginx on Dwellers, SELinux raised a permission denied
for /var/log/www/error.log. That file had the var_log_t context.

This was particulary a defect as roles/webserver-core/nginx/config
was applied immediately before the restart to prune OCSP config
and should have ensured the context of logs was correct:
selinux.fcontext_policy_applied isn't recursive by default.

Test Plan: Deployed on Dwellers

Reviewers: dereckson

Reviewed By: dereckson

Differential Revision: https://devcentral.nasqueron.org/D3666

Details

Provenance
derecksonAuthored on Fri, Sep 12, 18:41
derecksonPushed on Fri, Sep 12, 19:01
Reviewer
dereckson
Differential Revision
D3666: Apply SELinux context type recursively to /var/log/www
Parents
rOPSec6cec890b8e: Allow all users to read RabbitMQ credential to get notifications
Branches
Unknown
Tags
Unknown
References
HEAD -> main