Page MenuHomeDevCentral

Improve SELinux policies for nginx in paas-docker role
ClosedPublic

Authored by dereckson on Oct 27 2018, 23:17.
Tags
None
Referenced Files
F2742015: D1959.id4954.diff
Thu, Mar 28, 03:11
F2741196: D1959.id4952.diff
Wed, Mar 27, 23:40
Unknown Object (File)
Tue, Mar 26, 14:53
Unknown Object (File)
Mon, Mar 25, 07:47
Unknown Object (File)
Mon, Mar 25, 07:47
Unknown Object (File)
Mon, Mar 25, 07:46
Unknown Object (File)
Mon, Mar 25, 07:46
Unknown Object (File)
Mon, Mar 25, 07:46
Subscribers
None

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Passed
Unit
No Test Coverage
Branch
paas-docker-selinux-love-for-nginx (branched from master)
Build Status
Buildable 3054
Build 3302: arc lint + arc unit

Event Timeline

dereckson created this revision.
Equatower journal
Oct 28 08:32:32 equatower.nasqueron.org kernel: SELinux: 2048 avtab hash slots, 106961 rules.
Oct 28 08:32:32 equatower.nasqueron.org kernel: SELinux: 2048 avtab hash slots, 106961 rules.
Oct 28 08:32:33 equatower.nasqueron.org kernel: SELinux:  8 users, 14 roles, 5014 types, 311 bools, 1 sens, 1024 cats
Oct 28 08:32:33 equatower.nasqueron.org kernel: SELinux:  97 classes, 106961 rules

Allow to read link files too (e.g. Let's encrypt certificate symlink)

dereckson marked 2 inline comments as done.
dereckson added inline comments.
roles/paas-docker/wwwroot-502/init.sls
20

Not recursive: it only applies to /var/wwwroot-502 directory

Apply SELinux policy a recursive way

Use a regex to be recursive

This revision is now accepted and ready to land.Oct 28 2018, 18:56
This revision was automatically updated to reflect the committed changes.