Bug 1496492 - Enable SELinux on CephFS
Summary: Enable SELinux on CephFS
Keywords:
Status: CLOSED DUPLICATE of bug 1814689
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Distribution
Version: 1.3.3
Hardware: All
OS: Linux
low
low
Target Milestone: rc
: 4.1
Assignee: Jeff Layton
QA Contact: Tejas
URL:
Whiteboard:
Depends On: 1632385 1715572 1814668
Blocks: 1812948 1814689
TreeView+ depends on / blocked
 
Reported: 2017-09-27 15:04 UTC by Greg Farnum
Modified: 2020-04-06 17:20 UTC (History)
15 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1812948 1814668 1814689 (view as bug list)
Environment:
Last Closed: 2020-04-06 17:20:44 UTC
Embargoed:


Attachments (Terms of Use)

Description Greg Farnum 2017-09-27 15:04:09 UTC
Description of problem: CephFS supports ACLs in the security namespace, but SELinux refuses to run on it.

Nobody on our team is very clear on what needs to be done to make SELinux happy, so I was asked to create this ticket.

Comment 4 Lukas Vrabec 2017-09-29 07:59:37 UTC
CephFS team is working on own SELinux policy module. We don't have any ceph related policy in rhel. Maybe we could ask them.

Comment 13 Giridhar Ramaraju 2019-08-05 13:06:16 UTC
Updating the QA Contact to a Hemant. Hemant will be rerouting them to the appropriate QE Associate. 

Regards,
Giri

Comment 14 Giridhar Ramaraju 2019-08-05 13:08:57 UTC
Updating the QA Contact to a Hemant. Hemant will be rerouting them to the appropriate QE Associate. 

Regards,
Giri

Comment 17 Federico Lucifredi 2020-03-10 05:21:37 UTC
4.1 will start on 8.1 and be smoke-tested with 8.2 later. The rigorous testing will be on 8.1

let's keep the target at 4.1. This is low-risk and earlier delivery helps us with validation (we can get other teams to pitch in).  We can label it a tech preview to isolate the team from production expectations. 

Adding Gfarnum. Tracking in Trello for visibility.

Comment 23 Jeff Layton 2020-03-20 12:06:22 UTC
This is not going to make RHEL8.2. The associated kernel/selinux-policy bugs have been moved out to RHEL8.3.


Note You need to log in before you can comment on or make changes to this bug.