Page MenuHomeDevCentral

Improve SELinux policies for nginx in paas-docker role
ClosedPublic

Authored by dereckson on Oct 27 2018, 23:17.
Tags
None
Referenced Files
F2748697: D1959.id4957.diff
Fri, Mar 29, 10:19
Unknown Object (File)
Thu, Mar 28, 03:11
Unknown Object (File)
Wed, Mar 27, 23:40
Unknown Object (File)
Tue, Mar 26, 14:53
Unknown Object (File)
Mon, Mar 25, 07:47
Unknown Object (File)
Mon, Mar 25, 07:47
Unknown Object (File)
Mon, Mar 25, 07:46
Unknown Object (File)
Mon, Mar 25, 07:46
Subscribers
None

Diff Detail

Repository
rOPS Nasqueron Operations
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

dereckson created this revision.
Equatower journal
Oct 28 08:32:32 equatower.nasqueron.org kernel: SELinux: 2048 avtab hash slots, 106961 rules.
Oct 28 08:32:32 equatower.nasqueron.org kernel: SELinux: 2048 avtab hash slots, 106961 rules.
Oct 28 08:32:33 equatower.nasqueron.org kernel: SELinux:  8 users, 14 roles, 5014 types, 311 bools, 1 sens, 1024 cats
Oct 28 08:32:33 equatower.nasqueron.org kernel: SELinux:  97 classes, 106961 rules

Allow to read link files too (e.g. Let's encrypt certificate symlink)

dereckson marked 2 inline comments as done.
dereckson added inline comments.
roles/paas-docker/wwwroot-502/init.sls
20

Not recursive: it only applies to /var/wwwroot-502 directory

Apply SELinux policy a recursive way

Use a regex to be recursive

This revision is now accepted and ready to land.Oct 28 2018, 18:56
This revision was automatically updated to reflect the committed changes.