Created attachment 1304822 [details] audit.log in permissive mode Description of problem: SELinux policy needs additions to support the Cinder backend for Glance Version-Release number of selected component (if applicable): OSP12 Steps to Reproduce: 1. Configure Cinder backend for Glance 2. Attempt to upload an image from a file to Glance Actual results: Fails w/ HTTP 500 Additional info: The Cinder backend for Glance uses os-brick and oslo.privsep to connect to volumes, which is different from other Glance backends. A previous attempt to address this same case is here: https://bugzilla.redhat.com/show_bug.cgi?id=1395240 Note: it is not possible to test this out of the box on OSP12 today because some configuration changes in the Glance packages that have not yet landedg. (These were configured by hand on the test machine used to generate the audit log here.)
https://github.com/redhat-openstack/openstack-selinux/commit/5002b373a03c3910cc7a5fbd94468e8e3b84d55c
Does the verification of the glance-cinder backend effectively verify this one?
I'd think so
Yes, I agree.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:3462