Bug 1638941 - gluster-ansible roles should set the required SELinux labels
Summary: gluster-ansible roles should set the required SELinux labels
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Red Hat Gluster Storage
Classification: Red Hat Storage
Component: rhhi
Version: rhhiv-1.5
Hardware: x86_64
OS: Linux
high
high
Target Milestone: ---
: RHHI-V 1.5
Assignee: Sahina Bose
QA Contact: SATHEESARAN
URL:
Whiteboard:
Depends On: 1638940
Blocks: 1520836
TreeView+ depends on / blocked
 
Reported: 2018-10-13 07:00 UTC by SATHEESARAN
Modified: 2019-05-20 04:55 UTC (History)
5 users (show)

Fixed In Version: gluster-ansible-roles-1.0.3
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1638940
Environment:
Last Closed: 2019-05-20 04:55:19 UTC
Embargoed:


Attachments (Terms of Use)

Description SATHEESARAN 2018-10-13 07:00:35 UTC
Description of problem:
-----------------------
After creating gluster bricks using gluster-ansible-roles, selinux labels are missing on the XFS bricks

Version-Release number of selected component (if applicable):
---------------------------------------------------------------
gluster-ansible-role-1.0.2-2

How reproducible:
-------------------
Always

Steps to Reproduce:
--------------------
1. Create bricks using gluster-ansible-roles
2. Check for selinux labels on the brick mount

Actual results:
---------------
Missing selinux label on gluster brick mounts

Expected results:
-----------------
Proper selinux label should be set on the brick mounts

Additional info:
-----------------
[root@ ]# ls -lsZ /gluster_bricks/vmstore/
total 0
drwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 vmstore

[root@ ]# ls -lsZ /gluster_bricks/vmstore/vmstore/
total 0
-rwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 __DIRECT_IO_TEST__
drwxr-xr-x. vdsm kvm system_u:object_r:unlabeled_t:s0 e0522414-519c-43b1-92de-47772d934eb4

Comment 4 SATHEESARAN 2018-10-16 01:01:47 UTC
As the dependent gluster-ansible bugs is already ON_QA, moving this bug too

Comment 5 SATHEESARAN 2018-10-16 01:02:08 UTC
Tested with gluster-ansible-roles-1.0.3.

Post RHHI deployment, bricks does have the required selinux labels on them
#  ls -1Z /gluster_bricks/
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 data
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 engine
drwxr-xr-x. root root system_u:object_r:glusterd_brick_t:s0 vmstore


Note You need to log in before you can comment on or make changes to this bug.