Allow nginx to connect to other servers
ClosedPublic
Actions

Authored by dereckson on Mar 23 2018, 00:37.

Tags

None

Referenced Files

	F25017269: D1478.diff
	Wed, Mar 25, 12:11

	F25017101: D1478.id3787.diff
	Wed, Mar 25, 11:52

	F25016622: D1478.diff
	Wed, Mar 25, 10:59

	F25015941: D1478.diff
	Wed, Mar 25, 10:27

	F25013704: D1478.id3788.diff
	Wed, Mar 25, 07:29

	F25007282: D1478.id3787.diff
	Tue, Mar 24, 21:57

	F25005152: D1478.diff
	Tue, Mar 24, 18:30

	Unknown Object (File)
	Mon, Mar 23, 14:40

View All Files

Subscribers

None

Details

Reviewers

dereckson

Maniphest Tasks

T1365: SELinux policy for nginx proxy_pass

Commits

rOPSedf5b666098a: Allow nginx to connect to other servers

Summary

This SELinux flag allows a web server to connect to another network socket.

This is required to use nginx proxy_pass capability.

Fixes T1365.

Test Plan

Tested on Equatower

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

selinux/httpd_can_network_connect (branched from master)

Build Status

Buildable 2333
Build 2581: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Mar 23 2018, 00:37

dereckson created this revision.

Harbormaster completed remote builds in B2333: Diff 3787.Mar 23 2018, 00:37

dereckson accepted this revision.Mar 23 2018, 00:38

This revision is now accepted and ready to land.Mar 23 2018, 00:38

Closed by commit rOPSedf5b666098a: Allow nginx to connect to other servers (authored by dereckson). · Explain WhyMar 23 2018, 00:38

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

roles/

paas-docker/

nginx/

init.sls

1 line

selinux.sls

22 lines

Diff 3787

View Options

roles/paas-docker/nginx/init.sls