| Summary: | docker requires an updated selinux-policy-targeted for interfaces it uses to be mainstream | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Daniel Walsh <dwalsh> | ||||
| Component: | docker | Assignee: | Lokesh Mandvekar <lsm5> | ||||
| Status: | CLOSED ERRATA | QA Contact: | atomic-bugs <atomic-bugs> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | medium | ||||||
| Version: | 7.3 | CC: | dwalsh, gouyang, lsm5, lvrabec, mgrepl, mjenner | ||||
| Target Milestone: | rc | Keywords: | Extras | ||||
| Target Release: | --- | ||||||
| Hardware: | Unspecified | ||||||
| OS: | Unspecified | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | |||||||
| : | 1341257 (view as bug list) | Environment: | |||||
| Last Closed: | 2016-11-04 09:09:40 UTC | Type: | Bug | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Bug Depends On: | 1297815 | ||||||
| Bug Blocks: | 1341257 | ||||||
| Attachments: |
|
||||||
|
Description
Daniel Walsh
2016-01-29 15:51:19 UTC
Hi Dan, Do you have some more info related to this BZ? I installed actual docker (and docker-selinux) package from brew and it looks fine. Could you point me where can I found missing interfaces? Thank you. Created attachment 1163202 [details]
Here is the difference on docker* files between Fedora and RHEL
We have not removed the cruft that we added to the RHEL7 docker-selinux package, which is allowing this to install.
OK, I need to backport fedora docker policy to selinux-policy package and update interfaces. These changes will be in rhel distro-selinux package and during docker-selinux installation process will be docker distro-policy replaced by policy shipped by docker-selinux package. Lokesh, I sent you patch for docker.spec file and built selinux-policy package with changes related to docker: https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=498234 Could you create builds with my patch included and test it? Thank you! Added patch for docker to make it working on rhel-7.3. Moving assigne to Dan. Lokesh, we will need this patch when we are releasing docker for 7.3, we should be able to build off of the master branch at that time. Since we will be having one or more releases before 7.3 we need to hold off on this. yup, on hold until extras 7.3 We have the branch available I believe, moving to modified. Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2016-2634.html |