When running with SELinux in enforcing mode, the OSDs data dir is not labeled

Bug #1611893 reported by Giulio Fidente
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
puppet-ceph
Fix Released
Medium
Giulio Fidente

Bug Description

When deploying an OSD backed by a regular directory on a node with SELinux in 'enforcing' mode, we need to label the data directory appropriately.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-ceph (master)

Fix proposed to branch: master
Review: https://review.openstack.org/353673

Changed in puppet-ceph:
assignee: nobody → Giulio Fidente (gfidente)
status: New → In Progress
Revision history for this message
Giulio Fidente (gfidente) wrote :

Also see [1] for more details on the label to apply.

1. https://github.com/ceph/ceph/commit/c52eb995e0d9c3bbb6d0293f5dacaeb511f37f96

Changed in puppet-ceph:
importance: Undecided → Medium
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to puppet-ceph (master)

Reviewed: https://review.openstack.org/353673
Committed: https://git.openstack.org/cgit/openstack/puppet-ceph/commit/?id=f13493abc38cb13eec94bf203f15ec1d26d7ad28
Submitter: Jenkins
Branch: master

commit f13493abc38cb13eec94bf203f15ec1d26d7ad28
Author: Giulio Fidente <email address hidden>
Date: Wed Aug 10 20:22:00 2016 +0200

    Ensure SELinux file context is applied on data directories

    When SELinux is in 'enforcing' mode, we need to label the data
    directories.

    Change-Id: Ic2c376999315c89ae05e45a2aab31cacf3369b6a
    Closes-Bug: 1611893

Changed in puppet-ceph:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to puppet-ceph (stable/hammer)

Fix proposed to branch: stable/hammer
Review: https://review.openstack.org/377838

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on puppet-ceph (stable/hammer)

Change abandoned by Alex Schultz (<email address hidden>) on branch: stable/hammer
Review: https://review.openstack.org/377838
Reason: Abandoning per our policy[0]. If you wish to continue this work, please restore this or let us know in #puppet-openstack and we can restore it.

[0] https://docs.openstack.org/developer/puppet-openstack-guide/reviews.html

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.