Foreman » SELinux

04/25/2014

01:15 PM Bug #5446 (New): Denial from cron - postfix

This should be filed against the base OS in my opinion, it looks like Postfix is searching /var/lib and hitting /var/... Dominic Cleal

12:40 PM Bug #5446: Denial from cron - postfix

https://github.com/theforeman/foreman-selinux/pull/15
Added to existing PR. Lukas Zapletal

12:38 PM Bug #5446 (Rejected): Denial from cron - postfix

AVC:... Lukas Zapletal

12:37 PM Bug #3895: AVC denials from Foreman 1.3 installation

Ah too late. Lukas Zapletal

12:37 PM Bug #3895: AVC denials from Foreman 1.3 installation

FYI we have fixed the "ps" thing recently, not sure about the rest. Lukas Zapletal

11:40 AM Bug #3895 (Resolved): AVC denials from Foreman 1.3 installation

I believe these have been resolved by various updates to the policy between 1.3 and 1.5. The node.rb is now labelled... Dominic Cleal

10:33 AM Feature #4569 (Ready For Testing): Policy for websockify

https://github.com/theforeman/foreman-selinux/pull/15 Lukas Zapletal

10:33 AM Feature #4278 (Ready For Testing): Policy for foreman_discovery

https://github.com/theforeman/foreman-selinux/pull/15 Lukas Zapletal

10:33 AM Feature #4280 (Ready For Testing): Policy for foreman_setup

https://github.com/theforeman/foreman-selinux/pull/15 Lukas Zapletal

10:33 AM Feature #4279 (Ready For Testing): Policy for foreman_hooks

https://github.com/theforeman/foreman-selinux/pull/15 Lukas Zapletal

10:33 AM Feature #4277 (Ready For Testing): Policy for foreman_bootdisk

https://github.com/theforeman/foreman-selinux/pull/15 Lukas Zapletal

10:20 AM Feature #4113: Restrict Foreman not to be able to write to /usr/share/foreman

I will implement this change POST 1.5 release, because this refactoring can bring some issues. Lukas Zapletal

04/24/2014

12:09 PM Feature #4279 (Assigned): Policy for foreman_hooks

Lukas Zapletal

12:09 PM Feature #4113 (Assigned): Restrict Foreman not to be able to write to /usr/share/foreman

Lukas Zapletal

12:09 PM Feature #4280 (Assigned): Policy for foreman_setup

Lukas Zapletal

12:09 PM Feature #4277 (Assigned): Policy for foreman_bootdisk

Lukas Zapletal

04/22/2014

01:51 PM Feature #2820 (Resolved): Improve SELinux policy for puppet

https://admin.fedoraproject.org/updates/puppet-3.4.3-3.fc20 Lukas Zapletal

04/16/2014

08:46 PM Revision c446dc83: Bump version to 1.6-develop

Dominic Cleal