From c750a1b7616e3ca3eb891467ae929c1089ab5486 Mon Sep 17 00:00:00 2001 From: Ewoud Kohl van Wijngaarden Date: Thu, 10 Aug 2023 14:53:40 +0200 Subject: [PATCH] Set file contexts for all of /var/lib/pulp This wasn't done in the past to coexist with pulp-selinux (from Pulp 2), but those days are long gone. This also makes it easy to set the correct label on /var/lib/pulp/exports (as Katello does). --- pulpcore.fc | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/pulpcore.fc b/pulpcore.fc index e2b3b3a..8451611 100644 --- a/pulpcore.fc +++ b/pulpcore.fc @@ -15,13 +15,8 @@ # Old tasking system. /usr/local/lib/pulp/bin/rq -- gen_context(system_u:object_r:pulpcore_exec_t,s0) -/var/lib/pulp/(media|artifact)(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) -/var/lib/pulp/assets(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) -/var/lib/pulp/devel(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) +/var/lib/pulp(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) /var/lib/pulp/pulpcore_static(/.*)? gen_context(system_u:object_r:httpd_sys_content_t,s0) -/var/lib/pulp/tmp(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) -/var/lib/pulp/upload(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0) -/var/lib/pulp/sign-metadata.sh -- gen_context(system_u:object_r:pulpcore_var_lib_t,s0) # galaxy-importer /var/lib/pulp/.ansible(/.*)? gen_context(system_u:object_r:pulpcore_var_lib_t,s0)