Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SELinux: allow keepalived to cat haproxy pid #47

Merged
merged 2 commits into from
Jul 10, 2017

Commits on Jul 3, 2017

  1. SELinux: allow keepalived to cat haproxy pid

    On CentOS 7, an SELinux denial occurs when keepalived tries to read
    haproxy's PID file. This patch adds SELinux policy to allow this
    activity and breaks the SELinux compilation part of the role into
    a reusable set of tasks.
    major committed Jul 3, 2017
    Configuration menu
    Copy the full SHA
    61bbe6e View commit details
    Browse the repository at this point in the history

Commits on Jul 7, 2017

  1. Allow list of SELinux compile rules

    Keepalived role doesn't need HAProxy pid SELinux permissions.
    Therefore the keepalived_haproxy_pid_file was removed from
    the list of rules to compile.
    
    However, flexibility could be advisable, and the list of rules
    to compile should not be static, but instead be an overridable
    list. By default, the list will compile the ping rule, as it
    was done before, for retro-compatibility.
    
    But a deployer can now provide path to files to compile.
    evrardjp committed Jul 7, 2017
    Configuration menu
    Copy the full SHA
    027c7c1 View commit details
    Browse the repository at this point in the history