RepoMirrors
/
ceph
mirror of https://github.com/ceph/ceph
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
ceph/selinux/ceph.fc

16 lines
782 B
Plaintext
Raw Normal View History

selinux: Update policy for radosgw The current SELinux policy does not cover radosgw daemon. This patch introduces the SELinux support for radosgw daemon (civetweb only). Signed-off-by: Boris Ranto <branto@redhat.com>
2015-08-10 15:07:32 +00:00
/etc/rc\.d/init\.d/ceph -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
/etc/rc\.d/init\.d/radosgw -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
selinux: clip the ceph context to ceph-mgr also Signed-off-by: Kefu Chai <kchai@redhat.com>
2017-06-02 08:17:04 +00:00
/usr/bin/ceph-mgr -- gen_context(system_u:object_r:ceph_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/usr/bin/ceph-mon -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-mds -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-osd -- gen_context(system_u:object_r:ceph_exec_t,s0)
selinux: Update policy for radosgw The current SELinux policy does not cover radosgw daemon. This patch introduces the SELinux support for radosgw daemon (civetweb only). Signed-off-by: Boris Ranto <branto@redhat.com>
2015-08-10 15:07:32 +00:00
/usr/bin/radosgw -- gen_context(system_u:object_r:ceph_exec_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/var/lib/ceph(/.*)? gen_context(system_u:object_r:ceph_var_lib_t,s0)
/var/log/ceph(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
selinux: Allow log files to be located in /var/log/radosgw We do suggest users to put their logs in /var/log/radosgw in the documentation at times. We should also label that directory with ceph_var_log_t so that ceph daemons can also write there. The commit also updates the man page for this policy. This man page is automatically generated by * sepolicy manpage -p . -d ceph_t and have not been reloaded in a while. Hence, it contains few more changes than the new radosgw directory. Signed-off-by: Boris Ranto <branto@redhat.com>
2016-02-11 11:03:06 +00:00
/var/log/radosgw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
Add initial SELinux support This patch modifies the build system and spec file to provide a support for SELinux enforcing in an opt-in matter via ceph-selinux package. Signed-off-by: Boris Ranto <branto@redhat.com>
2015-05-15 13:18:05 +00:00
/var/run/ceph(/.*)? gen_context(system_u:object_r:ceph_var_run_t,s0)