Diffusion Nasqueron Operations edf5b666098a

Allow nginx to connect to other servers
edf5b666098a
Actions

Description

Allow nginx to connect to other servers

Summary:
This SELinux flag allows a web server to connect to another network socket.

This is required to use nginx proxy_pass capability.

Fixes T1365.

Test Plan: Tested on Equatower

Reviewers: dereckson

Reviewed By: dereckson

Maniphest Tasks: T1365

Differential Revision: https://devcentral.nasqueron.org/D1478

Details

Provenance

dereckson	Authored on Mar 23 2018, 00:37
dereckson	Pushed on Mar 23 2018, 00:38

Reviewer

dereckson

Differential Revision

D1478: Allow nginx to connect to other servers

Parents

rOPS86d6148c6a3a: Allow a container not to be linked to a nginx configuraiton

Branches

Unknown

Tags

Unknown

Tasks

T1265: Provision equatower, new Docker engine as a containerized OS
T1365: SELinux policy for nginx proxy_pass

Event Timeline

dereckson committed rOPSedf5b666098a: Allow nginx to connect to other servers (authored by dereckson).Mar 23 2018, 00:37

dereckson added a task: T1365: SELinux policy for nginx proxy_pass.

dereckson added a task: T1265: Provision equatower, new Docker engine as a containerized OS.Mar 23 2018, 01:06

Changes (2)

Path

Size

roles/

paas-docker/

nginx/

init.sls

	paas-docker/	nginx/
	bastion/	yubico/

selinux.sls

rOPSedf5b666098a

View Options

roles/paas-docker/nginx/init.sls