Add filesecctx argument to separate file context from process context #21
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
|
This will be released with v2.1.0 once Github Actions complete |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This is a followup PR to #17 which fixes an issue caused by the changes made there.
In the original PR, the SELinux context was changed from a process context to a file context, since it was used to set the file context on the directory resource. However, this same value is used in the cachefilesd config file to set the process context.
Upon changing the value to a process context, this caused the process to abort shortly after starting.
This PR adds a new argument which is used to control the directory context, and reverts the original process context back to its original value. This allows for a clean puppet run which correctly sets the context on the directory, and also allows the service to start successfully.