Allow nginx to connect to other servers
ClosedPublic
Actions

Authored by dereckson on Mar 23 2018, 00:37.

Tags

None

Referenced Files

	Unknown Object (File)
	Mon, Nov 4, 10:08

	Unknown Object (File)
	Sat, Oct 26, 01:43

	Unknown Object (File)
	Wed, Oct 23, 22:01

	Unknown Object (File)
	Fri, Oct 18, 01:58

	Unknown Object (File)
	Fri, Oct 18, 01:36

	Unknown Object (File)
	Mon, Oct 14, 09:32

	Unknown Object (File)
	Mon, Oct 14, 09:32

	Unknown Object (File)
	Mon, Oct 14, 09:02

View All Files

Subscribers

None

Details

Reviewers

dereckson

Maniphest Tasks

T1365: SELinux policy for nginx proxy_pass

Commits

rOPSedf5b666098a: Allow nginx to connect to other servers

Summary

This SELinux flag allows a web server to connect to another network socket.

This is required to use nginx proxy_pass capability.

Fixes T1365.

Test Plan

Tested on Equatower

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Mar 23 2018, 00:37

dereckson created this revision.

Harbormaster completed remote builds in B2333: Diff 3787.Mar 23 2018, 00:37

dereckson accepted this revision.Mar 23 2018, 00:38

This revision is now accepted and ready to land.Mar 23 2018, 00:38

Closed by commit rOPSedf5b666098a: Allow nginx to connect to other servers (authored by dereckson). · Explain WhyMar 23 2018, 00:38

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

nginx/

init.sls

1 line

selinux.sls

22 lines

Diff 3788

View Options

roles/paas-docker/nginx/init.sls