Skip to content

ENT-14018: Added missing RHEL9 SELinux rules#6098

Merged
craigcomstock merged 1 commit into
cfengine:masterfrom
aleksandrychev:ENT-14018
May 5, 2026
Merged

ENT-14018: Added missing RHEL9 SELinux rules#6098
craigcomstock merged 1 commit into
cfengine:masterfrom
aleksandrychev:ENT-14018

Conversation

@aleksandrychev

Copy link
Copy Markdown
Contributor

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:

  • cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
  • cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018

@aleksandrychev

Copy link
Copy Markdown
Contributor Author

@cf-bottom jenkins please

@aleksandrychev aleksandrychev marked this pull request as draft April 29, 2026 09:47
@cf-bottom

Copy link
Copy Markdown

@aleksandrychev

Copy link
Copy Markdown
Contributor Author

@aleksandrychev

Copy link
Copy Markdown
Contributor Author

@craigcomstock with this change after few agents runs I see:

ausearch -m avc -ts recent
<no matches>

and I received scheduled email

@aleksandrychev aleksandrychev marked this pull request as ready for review April 29, 2026 13:54

@craigcomstock craigcomstock left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

a little refactor is needed I think.

Comment thread misc/selinux/cfengine-enterprise.te.all Outdated
Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:
 - cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
 - cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018
Signed-off-by: Ihor Aleksandrychiev <ihor.aleksandrychiev@northern.tech>
@craigcomstock

Copy link
Copy Markdown
Contributor

@cf-bottom jenkins please

@cf-bottom

Copy link
Copy Markdown

@craigcomstock craigcomstock merged commit fc94943 into cfengine:master May 5, 2026
48 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants