Uploaded image for project: 'JBoss Core Services'
  1. JBoss Core Services
  2. JBCS-172

Update mod_cluster-native selinux policy

    XMLWordPrintable

Details

    Description

      I noticed two things about the mod_cluster-native selinux configuration:

      1) The command (semanage fcontext -a -t httpd_cache_t '/var/cache/mod_cluster(/.*)?') is redundant in that it is covered by the system's policy for httpd. On a default system we can see the mod_* is defined like the following:

      # semanage fcontext -l | grep /var/cache/mod | head -n1
      /var/cache/mod_.*                                  all files          system_u:object_r:httpd_cache_t:s0
      

      This means that a simple restorecon on the directory at install time would correctly set the context.

      2) After fixing JBCS-167, I noticed that removing the mod_cluster policy does not reset the /opt/rh/jbcs-httpd24/root/var/cache/mod_cluster directory's context because it was manually added. Adding the fcontext setting to a mod_cluster.fc file and generating a policy based on it would fix that, then we could remove the fcontext addition from the spec.

      Attachments

        Activity

          People

            rhn-support-csutherl Coty Sutherland
            rhn-support-csutherl Coty Sutherland
            Michal Karm Michal Karm
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: