Bug 1632385 - [RFE] SELinux support for CephFS
Summary: [RFE] SELinux support for CephFS
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: CephFS
Version: 3.2
Hardware: All
OS: Linux
high
low
Target Milestone: rc
: 3.2
Assignee: Patrick Donnelly
QA Contact: Ramakrishnan Periyasamy
Bara Ancincova
URL:
Whiteboard:
Depends On: 1631493
Blocks: 1496492 1629656 1812948 1814668 1814689
TreeView+ depends on / blocked
 
Reported: 2018-09-24 16:31 UTC by Patrick Donnelly
Modified: 2020-03-18 14:19 UTC (History)
6 users (show)

Fixed In Version: RHEL: ceph-12.2.8-3.el7cp Ubuntu: ceph_12.2.8-3redhat1
Doc Type: Enhancement
Doc Text:
.SELinux support for CephFS This update adds the SELinux policy for the Metadata Server (MDS) and `ceph-fuse` daemons so that users can use Ceph File System (CephFS) with SELinux in enforcing mode.
Clone Of:
Environment:
Last Closed: 2019-01-03 19:01:53 UTC
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Bugzilla 1593403 0 high CLOSED [Doc RFE] Document how to enable SELinux for CephFS 2021-02-22 00:41:40 UTC
Red Hat Product Errata RHBA-2019:0020 0 None None None 2019-01-03 19:02:06 UTC

Internal Links: 1593403

Description Patrick Donnelly 2018-09-24 16:31:31 UTC 
Description of problem:

SELinux profiles need applied and tested for MDS and ceph-fuse daemons.
Comment 8 Ramakrishnan Periyasamy 2018-11-22 08:42:18 UTC 
Moving this bug to verified state.

Not seeing any avc denials in Automation or in Manual testing

http://cistatus.ceph.redhat.com/ui/#cephci/launches/all%7Cpage.page=1&page.size=50&page.sort=start_time%2Cnumber%2CDESC/5be11a7d30c49e00011ef8cd?page.page=1&page.size=50&page.sort=start_time%2CASC&predefined_filter=collapsed
Comment 10 errata-xmlrpc 2019-01-03 19:01:53 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:0020
Note You need to log in before you can comment on or make changes to this bug.