nova: Add filetrans for console.log for instances

Resolves: rhbz#1499800 Signed-off-by: Lon Hohberger <lhh@redhat.com>
redhat-openstack · Nov 10, 2017 · ce3cff7 · ce3cff7
1 parent ce13ba7
commit ce3cff7
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/os-nova.te b/os-nova.te
@@ -65,6 +65,16 @@ nova_manage_lib_files(virtlogd_t)
 # Bugzilla 1377272
 allow virtlogd_t self:capability dac_override;
 
+# Bugzilla #1499800 (workaround)
+create_files_pattern(virtlogd_t, virt_image_t, virt_log_t)
+delete_files_pattern(virtlogd_t, virt_image_t, virt_log_t)
+rename_files_pattern(virtlogd_t, virt_image_t, virt_log_t)
+
+delete_files_pattern(virtlogd_t, virt_image_t, svirt_image_t)
+rename_files_pattern(virtlogd_t, virt_image_t, svirt_image_t)
+
+filetrans_pattern(virtlogd_t, virt_image_t, virt_log_t, file, "console.log")
+
 # Bugzilla 1249685
 gen_tunable(os_nova_use_execmem, false)
 tunable_policy(`os_nova_use_execmem',`