Skip to content
This repository has been archived by the owner on Dec 7, 2022. It is now read-only.

Commit

Permalink
Allow the Celery process to resolve domain names.
Browse files Browse the repository at this point in the history
Fedora Rawhide restricts access to /etc/resolv.conf. This commit
adds the sysnet_dns_name_resolve policy to the celery_t context
which allows it to resolve hostnames.

https://pulp.plan.io/issues/1764

fixes #1764
  • Loading branch information
bowlofeggs committed Mar 16, 2016
1 parent 07699e1 commit c1011cd
Showing 1 changed file with 1 addition and 3 deletions.
4 changes: 1 addition & 3 deletions server/selinux/server/pulp-celery.te
Expand Up @@ -71,9 +71,7 @@ ifndef(`distro_rhel6', `
# pulp_ostree sync call on F23 calls out to gpg
# temporary workaround for https://pulp.plan.io/issues/1731

ifdef(`distro_fedora23', `
allow celery_t self:process { setrlimit };
')
allow celery_t self:process { setrlimit };

######################################

Expand Down

0 comments on commit c1011cd

Please sign in to comment.