Red Hat Bugzilla – Bug 1303123
docker requires an updated selinux-policy-targeted for interfaces it uses to be mainstream
Last modified: 2016-11-04 05:09:40 EDT
Description of problem: Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
Hi Dan, Do you have some more info related to this BZ? I installed actual docker (and docker-selinux) package from brew and it looks fine. Could you point me where can I found missing interfaces? Thank you.
Created attachment 1163202 [details] Here is the difference on docker* files between Fedora and RHEL We have not removed the cruft that we added to the RHEL7 docker-selinux package, which is allowing this to install.
OK, I need to backport fedora docker policy to selinux-policy package and update interfaces. These changes will be in rhel distro-selinux package and during docker-selinux installation process will be docker distro-policy replaced by policy shipped by docker-selinux package.
Lokesh, I sent you patch for docker.spec file and built selinux-policy package with changes related to docker: https://brewweb.engineering.redhat.com/brew/buildinfo?buildID=498234 Could you create builds with my patch included and test it? Thank you!
Added patch for docker to make it working on rhel-7.3. Moving assigne to Dan.
Lokesh, we will need this patch when we are releasing docker for 7.3, we should be able to build off of the master branch at that time. Since we will be having one or more releases before 7.3 we need to hold off on this.
yup, on hold until extras 7.3
We have the branch available I believe, moving to modified.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://rhn.redhat.com/errata/RHSA-2016-2634.html