Bug 1460654 - Remove Glusterd SELinux module from Distribution policy
Remove Glusterd SELinux module from Distribution policy
Status: NEW
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: selinux-policy (Show other bugs)
7.5
All Linux
unspecified Severity high
: rc
: ---
Assigned To: Lukas Vrabec
Milos Malik
:
Depends On:
Blocks: 1460657
  Show dependency treegraph
 
Reported: 2017-06-12 06:49 EDT by Lukas Vrabec
Modified: 2018-06-26 08:00 EDT (History)
7 users (show)

See Also:
Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1460657 (view as bug list)
Environment:
Last Closed:
Type: Bug
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description Lukas Vrabec 2017-06-12 06:49:26 EDT
Description of problem:
Due to different timelines of Gluster and RHEL product we have lot of Z-stream erratas in RHEL because of changes in Glusterd SELinux module which is shipped by selinux-policy in RHEL base. This is quite uncomfortable for both sides (selinux-team and gluster team). We have solution for this situation. Glusterd SELinux module can be shipped by Gluster team by own (sub)package. For more info please see: 

Shipping a custom SELinux policy together with product bring several benefits:

    Changes  in a policy can be modified immediately, so the product package  maintainer does not need to wait until the distribution SELinux policy  is updated.

    Policy changes in product SELinux policy can  be released together with changes in product package so SELinux policy  will be always synchronized with a product.

    Product  package can follow different timeline deadlines then SELinux policy  package, this can cause issues and customer can get new product package  version without necessary changes in SELinux policy and this can block  some functionality of a product.


Actual results:
Glusterd SELinux module is part of selinux-policy package in RHEL.

Expected results:
Glusterd SELinux module will be part of glusterd package.

Note You need to log in before you can comment on or make changes to this bug.