| Summary: | policy for openshift hostmount-anyuid | ||
|---|---|---|---|
| Product: | OpenShift Container Platform | Reporter: | Rich Megginson <rmeggins> |
| Component: | Security | Assignee: | Eric Paris <eparis> |
| Status: | CLOSED WONTFIX | QA Contact: | Chuan Yu <chuyu> |
| Severity: | low | Docs Contact: | |
| Priority: | medium | ||
| Version: | 3.2.0 | CC: | aos-bugs, bchilds, dominick.grift, dwalsh, extras-qa, jialiu, jokerman, lmeyer, lvrabec, mmalik, mmccomas, plautrba, pvrabec, sponnaga, ssekidde, xtian |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | 1322603 | Environment: | |
| Last Closed: | 2019-07-17 22:57:30 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Rich Megginson
2016-03-30 21:07:58 UTC
Ok this is a good question how we will think about it. I don't think it should be a part of the distro policy. Is there a chance to provide the policy in a different way? (In reply to Miroslav Grepl from comment #2) > Ok this is a good question how we will think about it. I don't think it > should be a part of the distro policy. Is there a chance to provide the > policy in a different way? It is possible, but how? Rich, SELinux policy can be part of some rpm package. You can find more info here: http://lvrabec-selinux.rhcloud.com/2015/07/07/how-to-create-selinux-product-policy/ The problem is not specific to logging. I guess logging is the first attempt at actually using hostmount-anyuid? OpenShift itself needs to provide the necessary policy to make use of hostmount-anyuid with _all_ applications, not just the specific usage for logging. |