Skip to content

ENT-14018: Added missing RHEL9 SELinux rules (3.27.x)#6099

Open
aleksandrychev wants to merge 1 commit intocfengine:3.27.xfrom
aleksandrychev:ENT-14018_3.27.x
Open

ENT-14018: Added missing RHEL9 SELinux rules (3.27.x)#6099
aleksandrychev wants to merge 1 commit intocfengine:3.27.xfrom
aleksandrychev:ENT-14018_3.27.x

Conversation

@aleksandrychev
Copy link
Copy Markdown
Contributor

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:

  • cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
  • cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018

(cherry picked from commit b733ce3)

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:
 - cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
 - cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018
Signed-off-by: Ihor Aleksandrychiev <ihor.aleksandrychiev@northern.tech>
(cherry picked from commit b733ce3)
@aleksandrychev
Copy link
Copy Markdown
Contributor Author

@cf-bottom jenkins please

@cf-bottom
Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants