feat: selinux support nova_t and neutron_t #177697

Add SELinux support for openstack Related work items: #177697
BeyondTrust · Apr 9, 2019 · b1ffc87 · b1ffc87
1 parent 1df5d62
commit b1ffc87
Show file tree

Hide file tree

Showing 4 changed files with 35 additions and 2 deletions.
diff --git a/config/linux/redhat/rhel/6.0/pbis.pp b/config/linux/redhat/rhel/6.0/pbis.pp
diff --git a/config/linux/redhat/rhel/6.0/pbis.te b/config/linux/redhat/rhel/6.0/pbis.te
@@ -1,5 +1,5 @@
 
-module pbis 8.5.2;
+module pbis 9.0.1;
 
 require {
 	type unconfined_t;
@@ -472,3 +472,19 @@ pbis_client(xdm_dbusd_t)
 pbis_client(xfs_t)
 pbis_client(xserver_t)
 pbis_client(zos_remote_t)
+
+
+optional {
+    require {
+        type nova_t;
+    }
+    pbis_client(nova_t)
+}
+
+optional {
+    require {
+        type neutron_t;
+    }
+    pbis_client(neutron_t)
+}
+
diff --git a/config/linux/redhat/rhel/7.0/pbis.pp b/config/linux/redhat/rhel/7.0/pbis.pp
diff --git a/config/linux/redhat/rhel/7.0/pbis.te b/config/linux/redhat/rhel/7.0/pbis.te
@@ -1,5 +1,5 @@
 
-module pbis 8.5.2;
+module pbis 9.0.1;
 
 require {
         type abrt_t;
@@ -295,6 +295,7 @@ require {
     type zos_remote_t;
 }
 
+
 pbis_client(accountsd_t)
 pbis_client(abrt_t)
 pbis_client(alsa_t)
@@ -474,3 +475,19 @@ pbis_client(xdm_t)
 pbis_client(xdm_dbusd_t)
 pbis_client(xserver_t)
 pbis_client(zos_remote_t)
+
+optional {
+    require {
+        type nova_t;
+    }
+    pbis_client(nova_t)
+}
+
+optional {
+    require {
+        type neutron_t;
+    }
+    pbis_client(neutron_t)
+}
+
+