From b1ffc871065cb13fcdde0f60c522a80a658c607a Mon Sep 17 00:00:00 2001
From: Reyaud Ali <rali@beyondtrust.com>
Date: Tue, 9 Apr 2019 12:05:09 -0300
Subject: [PATCH] feat: selinux support nova_t and neutron_t #177697

Add SELinux support for openstack

Related work items: #177697
---
 config/linux/redhat/rhel/6.0/pbis.pp | Bin 62093 -> 63647 bytes
 config/linux/redhat/rhel/6.0/pbis.te |  18 +++++++++++++++++-
 config/linux/redhat/rhel/7.0/pbis.pp | Bin 60496 -> 62046 bytes
 config/linux/redhat/rhel/7.0/pbis.te |  19 ++++++++++++++++++-
 4 files changed, 35 insertions(+), 2 deletions(-)

diff --git a/config/linux/redhat/rhel/6.0/pbis.pp b/config/linux/redhat/rhel/6.0/pbis.pp
index ab6d4ea6c877787c25457aad18598b1c44ff76cf..529ea753517b285548a3e0457b915401e28cbcdd 100644
GIT binary patch
delta 345
zcmeBu$~^xgvrzy4nxBje3=B*_ECR&Q_a_QjvRdjH=oxMdkZ0yS3KRojE+9^wEGRCs
zc?Po<D=Qn2dj!N~&M!;ce1PMeIO9<emp8Svq$ocxzJwE~pkQ($i}dDI3YVD}nK#!d
zb1$5HSC0cE0R~KyXC089yf8ds^2!4|Kw4vR?x87+{F4PageS){^T6<C%fkVTlh>M|
zYgDX-Xf#yUoSb)PGNU*ajdDzkM>j_t^<x$Wxi=5!)c6vRXTcucy!ZqUA1^bE3#6GR
wZ@D&4C=ccZm`di!-q%l}D%>o2Bav}(!X1{)O*h>HH$Q)MoE6O5{NWZO0B8ANaR2}S

delta 187
zcmbRLk-7INvrzy4nxBje3=B*_ECR%;Hzx{NvRdew>KSbekZ0yS3={)lE+9^woX8@*
zc{;N;D=RCITQoV5S7tLO=W21r0<g?ah09En7pSmozM#ypaAE?-<c?Fv7!PmuKkdi7
zdGk3=zRBP3@J_yXXWHb3yN6gomNIVkzn923x!^v_<_-6~1SPqY75q|5ax(L>6^iqd
fvr|hHl5-M^i&Il3e|)XKS^48U*3AdL-Dd;<DsV!7

diff --git a/config/linux/redhat/rhel/6.0/pbis.te b/config/linux/redhat/rhel/6.0/pbis.te
index c503a2584..043ebaa84 100644
--- a/config/linux/redhat/rhel/6.0/pbis.te
+++ b/config/linux/redhat/rhel/6.0/pbis.te
@@ -1,5 +1,5 @@
 
-module pbis 8.5.2;
+module pbis 9.0.1;
 
 require {
 	type unconfined_t;
@@ -472,3 +472,19 @@ pbis_client(xdm_dbusd_t)
 pbis_client(xfs_t)
 pbis_client(xserver_t)
 pbis_client(zos_remote_t)
+
+
+optional {
+    require {
+        type nova_t;
+    }
+    pbis_client(nova_t)
+}
+
+optional {
+    require {
+        type neutron_t;
+    }
+    pbis_client(neutron_t)
+}
+
diff --git a/config/linux/redhat/rhel/7.0/pbis.pp b/config/linux/redhat/rhel/7.0/pbis.pp
index 9b124637453c6bbde5cdc1136b57aec6f7d69774..afec25259dc2af92beddbf9322e57dffdade40c8 100644
GIT binary patch
delta 313
zcmca`gZbVQW}*K7H9r{{7#Ns<SOkdY+?pt4$!e)*pl7%-K!}-lKTr&Wxq(=G@<eW#
z&E3q=tgLK6?!L(j#bmhh%M#;DSb^N!$p?jHH*;{#5o6pBl3`0NEh);++dNPHD-$F0
z<|#_o=T7!l=ime?1p}r@yOkyv1u0I>-{TCVT_?Bit7f#He1E^eX5;-9jFaW{(bQT6
zL)2OYL)6AY)p9X0?%!;8FrQf%<f=TdgFs#adu#KmBYC{M%rGvHW}Ym2X`WCX#C7o{
jFqO=cw_G|Yg`yCs806ZrjQrw~+{qh{32$C>d7T6RcZXK8

delta 122
zcmccjg!#e^W}*K7H9r{{7#Ns<SOkdsu1plNWVO&U)ic@{AjHhO7bph8+(0Zo*^pIw
za~E?A>t-I#ePWwG%fDxu{Lg@6^DCtbb0;QnOm;eUigE8|-sAbqn<t&h=4AyL%s83r
V#=OY~ZycI@_bkWe$v00+00109D^UOd

diff --git a/config/linux/redhat/rhel/7.0/pbis.te b/config/linux/redhat/rhel/7.0/pbis.te
index 7ae5ccc90..de42e6530 100644
--- a/config/linux/redhat/rhel/7.0/pbis.te
+++ b/config/linux/redhat/rhel/7.0/pbis.te
@@ -1,5 +1,5 @@
 
-module pbis 8.5.2;
+module pbis 9.0.1;
 
 require {
         type abrt_t;
@@ -295,6 +295,7 @@ require {
     type zos_remote_t;
 }
 
+
 pbis_client(accountsd_t)
 pbis_client(abrt_t)
 pbis_client(alsa_t)
@@ -474,3 +475,19 @@ pbis_client(xdm_t)
 pbis_client(xdm_dbusd_t)
 pbis_client(xserver_t)
 pbis_client(zos_remote_t)
+
+optional {
+    require {
+        type nova_t;
+    }
+    pbis_client(nova_t)
+}
+
+optional {
+    require {
+        type neutron_t;
+    }
+    pbis_client(neutron_t)
+}
+  
+