Freeze break request: Fix SELinux context on bodhi comps repo

Kevin Fenzi kevin at scrye.com
Tue Nov 1 19:41:07 UTC 2011


On Tue, 1 Nov 2011 15:01:45 -0400
Luke Macken <lmacken at redhat.com> wrote:

> We recently changed where bodhi checks out the comps repo, and now we
> need to fix the SELinux context on it in order to fix a violation
> during pushes. Even though this violation isn't fatal, it's still
> preventing us from injecting up-to-date comps into our updates repos.
> 
> The change below only effects our releng/relepel machines.
> 
> +1's ?
> 
> Thanks,
> luke
> 
> --- a/modules/bodhi/manifests/init.pp
> +++ b/modules/bodhi/manifests/init.pp
> @@ -147,7 +147,7 @@ class bodhi::app::masher inherits bodhi {
> semanage_fcontext { [
> "/home/masher/.cvspass",
> - "/usr/share/bodhi/comps(/.*)?",
> + "/var/tmp/bodhi/comps(/.*)?",
> ]:
> type => "httpd_sys_script_rw_t",
> }

+1 here. 

kevin
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20111101/76e763b5/attachment.bin 


More information about the infrastructure mailing list