New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[luminous] selinux: Allow getattr on lnk sysfs files #18650

Merged
merged 1 commit into from Nov 2, 2017

Conversation

Projects
None yet
4 participants
@b-ranto
Contributor

b-ranto commented Oct 31, 2017

selinux: Allow getattr on lnk sysfs files
This showed up during downstream testing for luminous. We are doing
getattr on the sysfs lnk files and the current policy does not allow
this.

Fixes: http://tracker.ceph.com/issues/21523
Signed-off-by: Boris Ranto <branto@redhat.com>
(cherry picked from commit 394c26a)

@ktdreyer ktdreyer added this to the luminous milestone Oct 31, 2017

@b-ranto

This comment has been minimized.

Show comment
Hide comment
@b-ranto

b-ranto Nov 1, 2017

Contributor

@smithfarm Can I merge this or do you want to run this through some tests? It is a minor change that just adds a single new capability/permission to the ceph daemons.

Contributor

b-ranto commented Nov 1, 2017

@smithfarm Can I merge this or do you want to run this through some tests? It is a minor change that just adds a single new capability/permission to the ceph daemons.

@smithfarm

This comment has been minimized.

Show comment
Hide comment
@smithfarm

smithfarm Nov 1, 2017

Contributor

@b-ranto The backporting team only sees PRs that have a milestone set. Since @theanalyst and @kmroz are driving 12.2.2, I'll defer to them.

Contributor

smithfarm commented Nov 1, 2017

@b-ranto The backporting team only sees PRs that have a milestone set. Since @theanalyst and @kmroz are driving 12.2.2, I'll defer to them.

@liewegas liewegas merged commit 24bd1de into ceph:luminous Nov 2, 2017

4 checks passed

Docs: build check OK - docs built
Details
Signed-off-by all commits in this PR are signed
Details
Unmodified Submodules submodules for project are unmodified
Details
make check make check succeeded
Details

@b-ranto b-ranto deleted the b-ranto:wip-allow-getattr-luminous branch Nov 9, 2017

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment