Freeze break request: Fix SELinux context on bodhi comps repo

[Toshio Kuratomi]

On Tue, Nov 01, 2011 at 01:41:07PM -0600, Kevin Fenzi wrote:
> On Tue, 1 Nov 2011 15:01:45 -0400
> Luke Macken <lmacken at redhat.com> wrote:
> 
> > We recently changed where bodhi checks out the comps repo, and now we
> > need to fix the SELinux context on it in order to fix a violation
> > during pushes. Even though this violation isn't fatal, it's still
> > preventing us from injecting up-to-date comps into our updates repos.
> > 
> > The change below only effects our releng/relepel machines.
> > 
> > +1's ?
> > 
> > Thanks,
> > luke
> > 
> > --- a/modules/bodhi/manifests/init.pp
> > +++ b/modules/bodhi/manifests/init.pp
> > @@ -147,7 +147,7 @@ class bodhi::app::masher inherits bodhi {
> > semanage_fcontext { [
> > "/home/masher/.cvspass",
> > - "/usr/share/bodhi/comps(/.*)?",
> > + "/var/tmp/bodhi/comps(/.*)?",
> > ]:
> > type => "httpd_sys_script_rw_t",
> > }
> 
> +1 here. 
> 
+1

-Toshio
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: not available
Url : http://lists.fedoraproject.org/pipermail/infrastructure/attachments/20111101/e208ebb4/attachment.bin