mirror of
https://github.com/ceph/ceph
synced 2024-12-12 14:39:05 +00:00
3b0550297f
This adds selinux support for the ceph iscsi daemons under the ceph github: ceph-iscsi-config - rbd-target-gw ceph-iscsi-cli - rbd-target-api We use tcmu-runner, but that will go into the core policy to avoid conflicts with gluster and distro bases. This requires the patches: https://github.com/ceph/ceph-iscsi-config/pull/90 https://github.com/ceph/ceph-iscsi-cli/pull/134 Signed-off-by: Mike Christie <mchristi@redhat.com>
21 lines
1.1 KiB
Plaintext
21 lines
1.1 KiB
Plaintext
/etc/rc\.d/init\.d/ceph -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
|
|
/etc/rc\.d/init\.d/radosgw -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
|
|
|
|
/usr/bin/ceph-mgr -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/ceph-mon -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/ceph-mds -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/ceph-fuse -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/ceph-osd -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/radosgw -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/rbd-target-gw -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
/usr/bin/rbd-target-api -- gen_context(system_u:object_r:ceph_exec_t,s0)
|
|
|
|
/var/lib/ceph(/.*)? gen_context(system_u:object_r:ceph_var_lib_t,s0)
|
|
|
|
/var/log/ceph(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
|
|
/var/log/radosgw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
|
|
/var/log/rbd-target-api(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
|
|
/var/log/rbd-target-gw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
|
|
|
|
/var/run/ceph(/.*)? gen_context(system_u:object_r:ceph_var_run_t,s0)
|