RepoMirrors
/
ceph
mirror of https://github.com/ceph/ceph
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
ceph/selinux/ceph.fc

21 lines
1.1 KiB
Plaintext
Raw Normal View History

selinux: Update policy for radosgw The current SELinux policy does not cover radosgw daemon. This patch introduces the SELinux support for radosgw daemon (civetweb only). Signed-off-by: Boris Ranto <branto@redhat.com>
2015-08-10 15:07:32 +00:00
/etc/rc\.d/init\.d/ceph -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
/etc/rc\.d/init\.d/radosgw -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
selinux: clip the ceph context to ceph-mgr also Signed-off-by: Kefu Chai <kchai@redhat.com>
2017-06-02 08:17:04 +00:00
/usr/bin/ceph-mgr -- gen_context(system_u:object_r:ceph_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/usr/bin/ceph-mon -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-mds -- gen_context(system_u:object_r:ceph_exec_t,s0)
ceph-fuse: add to selinux profile Fixes: http://tracker.ceph.com/issues/36103 Signed-off-by: Patrick Donnelly <pdonnell@redhat.com>
2018-09-20 17:27:43 +00:00
/usr/bin/ceph-fuse -- gen_context(system_u:object_r:ceph_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/usr/bin/ceph-osd -- gen_context(system_u:object_r:ceph_exec_t,s0)
selinux: Update policy for radosgw The current SELinux policy does not cover radosgw daemon. This patch introduces the SELinux support for radosgw daemon (civetweb only). Signed-off-by: Boris Ranto <branto@redhat.com>
2015-08-10 15:07:32 +00:00
/usr/bin/radosgw -- gen_context(system_u:object_r:ceph_exec_t,s0)
igw: Add selinux support for ceph iscsi This adds selinux support for the ceph iscsi daemons under the ceph github: ceph-iscsi-config - rbd-target-gw ceph-iscsi-cli - rbd-target-api We use tcmu-runner, but that will go into the core policy to avoid conflicts with gluster and distro bases. This requires the patches: https://github.com/ceph/ceph-iscsi-config/pull/90 https://github.com/ceph/ceph-iscsi-cli/pull/134 Signed-off-by: Mike Christie <mchristi@redhat.com>
2018-11-05 19:05:19 +00:00
/usr/bin/rbd-target-gw -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/rbd-target-api -- gen_context(system_u:object_r:ceph_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/var/lib/ceph(/.*)? gen_context(system_u:object_r:ceph_var_lib_t,s0)
/var/log/ceph(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
selinux: Allow log files to be located in /var/log/radosgw We do suggest users to put their logs in /var/log/radosgw in the documentation at times. We should also label that directory with ceph_var_log_t so that ceph daemons can also write there. The commit also updates the man page for this policy. This man page is automatically generated by * sepolicy manpage -p . -d ceph_t and have not been reloaded in a while. Hence, it contains few more changes than the new radosgw directory. Signed-off-by: Boris Ranto <branto@redhat.com>
2016-02-11 11:03:06 +00:00
/var/log/radosgw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
igw: Add selinux support for ceph iscsi This adds selinux support for the ceph iscsi daemons under the ceph github: ceph-iscsi-config - rbd-target-gw ceph-iscsi-cli - rbd-target-api We use tcmu-runner, but that will go into the core policy to avoid conflicts with gluster and distro bases. This requires the patches: https://github.com/ceph/ceph-iscsi-config/pull/90 https://github.com/ceph/ceph-iscsi-cli/pull/134 Signed-off-by: Mike Christie <mchristi@redhat.com>
2018-11-05 19:05:19 +00:00
/var/log/rbd-target-api(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
/var/log/rbd-target-gw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/var/run/ceph(/.*)? gen_context(system_u:object_r:ceph_var_run_t,s0)