Bug 1154728
| Summary: | [TestOnly][rhel7] graphite-web needs type "httpd_sys_rw_content_t" for files in "/var/lib/graphite-web(/.*)?" | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora EPEL | Reporter: | Martin Žember <mzember> | ||||||
| Component: | graphite-web | Assignee: | Piotr Popieluch <piotr1212> | ||||||
| Status: | CLOSED CURRENTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | medium | Docs Contact: | |||||||
| Priority: | medium | ||||||||
| Version: | epel7 | CC: | ebenes, jamielinux, jonathansteffan, mgrepl, mmalik, mzember, piotr1212 | ||||||
| Target Milestone: | --- | Keywords: | SELinux, TestOnly | ||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | 1148766 | Environment: | |||||||
| Last Closed: | 2015-03-24 20:08:57 UTC | Type: | Bug | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Embargoed: | |||||||||
| Bug Depends On: | 1148766 | ||||||||
| Bug Blocks: | |||||||||
| Attachments: |
|
||||||||
|
Description
Martin Žember
2014-10-20 15:43:45 UTC
This is graphite-web in EPEL not graphite2 in RHEL As this has moved to Fedora, may I kindly ask that someone (not necessarily QA) would test grephite-web with the new selinux-policy? Jonathan, do you have any suggestion? Where can you find selinux-policy-3.13.1-3.el7 package to install and test? It appears latest in the repositories is still 3.12.x. Created attachment 981634 [details]
selinux policy RPM
Created attachment 981637 [details]
selinux policy targeted RPM
Jamie, you are right, this is not clear, especially if you do not have access to brewweb.devel.redhat.com from the outside. I am attaching the packages. (I believe there is a better way to do this but I do not know it yet.) selinux-policy-3.13.1-16.el7 is definitely different than the *.fc* package for Fedora. BTW they are also here: http://people.redhat.com/dwalsh/SELinux/RHEL7/noarch/ http://people.redhat.com/dwalsh/SELinux/RHEL6/noarch/ After the move of this bug from RHEL to Fedora, it was not open for public. Opening now. There are people who are interested in testing this. The testing is not necessary in order to ship the graphite-web-related parts in the selinux-policy package, but you may download it and do some testing if interested. Tested this. graphite-web-0.9.12-8.el7.noarch works fine with selinux-policy-3.13.1-23.el7.noarch with selinux Enforcing. files in /var/lib/graphite-web/ have correct, httpd_sys_rw_content_t context. Thank you, Piotr! Good to know that it works. I could not do it by myself. |