Differential D1743

Supersede svirt_sandbox_file_t by container_file_t
ClosedPublic
Actions

Authored by dereckson on Sep 12 2018, 12:53.

Details

Reviewers

dereckson

Maniphest Tasks

T1418: Review SELinux context for Docker containers

Commits

rOPS8c08bbe3a2c5: Supersede svirt_sandbox_file_t by container_file_t

Summary

The svirt_sandbox_file_t type is deprecated.

Fixes T1418.

Test Plan

Apply states on Equatower

Diff Detail

Repository

rOPS Nasqueron Operations

Lint

Lint Passed

Unit

No Test Coverage

Branch

container_file_t (branched from master)

Build Status

Buildable 2716
Build 2964: arc lint + arc unit

Event Timeline

dereckson requested review of this revision.Sep 12 2018, 12:53

dereckson created this revision.

Harbormaster completed remote builds in B2716: Diff 4429.Sep 12 2018, 12:53

$ salt equatower state.apply roles/paas-docker/containers/jenkins
----------
          ID: selinux_context_jenkins_home
    Function: selinux.fcontext_policy_present
        Name: /srv/jenkins/cd/jenkins_home
      Result: True
     Comment: 
     Started: 12:54:16.919480
    Duration: 4048.744 ms
     Changes:   
              ----------
              new:
                  ----------
                  /srv/jenkins/cd/jenkins_home:
                      ----------
                      filetype:
                          all files
                      sel_type:
                          container_file_t
              old:
                  ----------
----------