Bug 1148425
| Summary: | graphite-web needs type "httpd_sys_rw_content_t" for files in "/var/lib/graphite-web(/.*)?" | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Jamie Nguyen <jamielinux> |
| Component: | selinux-policy-targeted | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED RAWHIDE | QA Contact: | Ben Levenson <benl> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | rawhide | CC: | dwalsh |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.13.1-85.fc22 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2014-10-03 12:32:37 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
commit edc52a9173f3fea2568095e847535db97111cb55
Author: Miroslav Grepl <mgrepl>
Date: Fri Oct 3 14:23:38 2014 +0200
Add support for /var/lib/graphite-web
|
The graphite-web package builds a graphite-web-selinux subpackage that runs this in %post: semanage fcontext -a -t httpd_sys_rw_content_t \ '%{_localstatedir}/lib/graphite-web(/.*)?' restorecon -R %{_localstatedir}/lib/graphite-web Obviously this is less than ideal. Could we please have this committed to selinux policy on all branches (f22, f21, f20, f19, epel7, el6, el5)? We can then get rid of this subpackage (and the dependency on policycoreutils-python).