Red Hat Bugzilla – Bug 922787
swift replication in /srv/node produces AVC denials [Docs]
Last modified: 2013-04-11 02:58:33 EDT
e.g. the box could easily be:
$ sudo chown -R swift:swift /srv/node/
$ sudo restorecon -R /srv
Sorry, the above was referring to the docs in chapter 13, section 4 of the Getting Started Guide.
Right below where we chown /srv/node, we should also add:
restorecon -R /srv
We do now call this from the RPM, but the RPM only handles the upgrade path - it can't fix the wrong contexts for a new installation, particularly when we're setting up several file systems during deployment. SELinux contexts will be wrong on the newly-created file systems.
An incorrect label will cause SELinux AVC denials when swift tries to access data in /srv