Activity
From 07/28/2014 to 08/26/2014
08/26/2014
-
04:09 AM Feature #4464 (Ready For Testing): Implement SELinux policy for smart-proxy
-
03:45 AM Bug #7193 (Pending): Katello does not install due to qpidd policy bug
-
08/25/2014
-
01:14 PM Tracker #7249: Policy with workarounds for Foreman w/ Katello
- This issue #7178
allow passenger_t self:process execmem;
has been merged upstream but I am going to revert ... -
- This rule is required for RHEL 7.0 (without SELinux upcoming errata):
auth_read_passwd(qpidd_t)
https://git... -
- This rule is needed for foreman-tasks (#7198):
allow passenger_t httpd_t:unix_stream_socket {read write};
... -
- There are several workarounds that needs to be solved to get Foreman with Katello working on RHEL6 and RHEL7. I want ...
-
- Since ping controller no longer execute @/etc/init.d/delayed-jobs@ the rule that allows this can be removed.
https...
08/21/2014
-
- Correcting the AVC:...
-
-
- ...
-
-
-
- This is temporary workaround until https://bugzilla.redhat.com/show_bug.cgi?id=1130086 is resolved.
-
- Investigating if daemons gem (used by foreman-tasks) does not cause that.
08/20/2014
-
05:01 PM
Bug #7178 (Closed): Allow passenger_t to EXECMEM
- Applied in changeset commit:d867377e56451fc43030a30958499d34e6f4e485.
-
- Scratch that for RHEL7, after investigation from this evening with Jason and Og, it turns out it is not passenger but...
-
- It was confirmed by our QA department that our application does work file in Enforcing.
-
- Fixes #7178 - allowed passenger_t to execmem
- 04:45 PM Revision d867377e: Fixes #7178 - allowed passenger_t to execmem
- Foreman-tasks wont start on RHEL7
08/15/2014
-
-
08/12/2014
-
- In that case add it to release notes. This is big! ;-)
-
11:01 AM
Bug #7034 (Closed): Fix relabel script on RHEL7
- Applied in changeset commit:7b9410507203c9c5f58283bc39f5da8ee8a92608.
-
- https://github.com/theforeman/foreman-selinux/pull/26
-
- A downstream bug was reported with some denials which has been fixed already upstream, but it looks like /var/run/for...
-
11:01 AM
Bug #7036 (Closed): Allow creation of log files for Foreman Rails app
- Applied in changeset commit:e842477295ed731377f3f43c5b8f84634b6f47a2.
-
- https://github.com/theforeman/foreman-selinux/pull/26
-
- It looks like our Rails app also creates new log files there. We only allow reads and writes....
-
11:01 AM
Bug #6979 (Closed): Policy does not load on EL7 due to consoletype_exec_t dependency
- Applied in changeset commit:7a59c90304ef32a67457a8071bbda07d161b6236.
-
11:01 AM
Bug #6014 (Closed): AVC denials from Puppet under Passenger on Foreman 1.6 on EL7
- Applied in changeset commit:7a59c90304ef32a67457a8071bbda07d161b6236.
-
11:01 AM
Bug #6013 (Closed): AVC denials from Passenger on Foreman 1.6 on EL7
- Applied in changeset commit:7a59c90304ef32a67457a8071bbda07d161b6236.
- 10:11 AM Revision e8424772: Fixes #7036 - allow log files creation for Rails app
- 10:11 AM Revision 7b941050: Fixes #7034 - added RHEL7 support to relabel script
- 10:11 AM Revision 7a59c903: Fixes #6013, #6014, #6979 - changes for RHEL7
08/11/2014
-
- Yup, it's official. I started works on the foreman-proxy policy.
-
08/07/2014
-
- These can be safely added, for some reason Puppet reads the ENC script. Different puppet in RHEL7 I guess. Allowed.
... -
- For the fs_getattr_xattr_fs, I was able to track it down a bit. Passenger creates few directories under /tmp during s...
-
- I've confirmed with Mirek that this macro was removed from RHEL7. Optional block should do it.
https://github.com/... -
- Part 1: https://github.com/theforeman/foreman-packaging/pull/305
-
- On my RHEL7 system, policy does not load at all. The reason is hidden, because the scriplet silently continues. We sh...
-
- Reminder: The packaging part is here: https://github.com/theforeman/foreman-packaging/pull/275
-
- Moving this off the sprint, I want to work on that later.
08/06/2014
-
12:01 PM
Feature #6961 (Closed): Permit websockify access to Puppet SSL certs for consoles
- Applied in changeset commit:cb7389ccb0ec3a1cf8c03da1e6192c11908e23e6.
-
- So consoles using websockify can be SSL-enabled and served over HTTPS, the websockify domain needs access to Puppet S...
- 11:19 AM Revision cb7389cc: fixes #6961 - Allow websockify to read puppet cert
-
10:01 AM
Bug #6780 (Closed): Unable to remove foreman-selinux
- Applied in changeset commit:ae6f1a694d6a13c32d9bdfecbbb95cd2d0bb20bd.
- 09:50 AM Revision ae6f1a69: Fixes #6780 - Remove elasticsearch port on uninstall
07/30/2014
Also available in: Atom