https://bugzilla.redhat.com/show_bug.cgi?id=1152267
--- Comment #2 from Thomas Vander Stichele <thomas(a)apestaart.org> ---
For reference, the puppet rules I have to set couchdb types:
selinux::filecontext { "/var/log/${name}":
seltype => 'couchdb_log_t'
}
selinux::filecontext { "/etc/${name}(/.*)?":
seltype => 'couchdb_conf_t'
}
selinux::filecontext { "/var/lib/${name}(/.*)?":
seltype => 'couchdb_var_lib_t'
}
In selinux-policy, the file couchdb.fc could be adapted:
/etc/couchdb(/.*)? gen_context(system_u:object_r:couchdb_conf_t,s0)
/etc/rc\.d/init\.d/couchdb --
gen_context(system_u:object_r:couchdb_initrc_exec_t,s0)
/usr/bin/couchdb --
gen_context(system_u:object_r:couchdb_exec_t,s0)
/var/lib/couchdb(/.*)? gen_context(system_u:object_r:couchdb_var_lib_t,s0)
/var/log/couchdb(/.*)? gen_context(system_u:object_r:couchdb_log_t,s0)
/var/run/couchdb(/.*)? gen_context(system_u:object_r:couchdb_var_run_t,s0)
line 1/4/5 should be changed to accept couchdb-.* instead of just couchdb
--
You are receiving this mail because:
You are on the CC list for the bug.