]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph.git/commit
projects / ceph.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 519b03f) | patch
selinux: Allow to manage locks 7971/head
authorBoris Ranto <branto@redhat.com>
Tue, 8 Mar 2016 09:59:33 +0000 (10:59 +0100)
committerBoris Ranto <branto@redhat.com>
Tue, 8 Mar 2016 09:59:38 +0000 (10:59 +0100)
commit5cd4ce517c2b1c930785f614cbeff661d7ca2624
tree065aacb1f005a9639e0602217cf562689ef6e072tree | snapshot
parent519b03f4b055fd247197d7383810764de31bebc1commit | diff
selinux: Allow to manage locks

We currently create the ceph lock by an unconfined process (ceph-disk).
Unconfined processes inherit the context from the parrent directory.
This allows ceph daemons to access the files with context inherrited
from the parent directory (/var/lock | /run/lock).

Signed-off-by: Boris Ranto <branto@redhat.com>
selinux/ceph.te diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.