https://bugzilla.redhat.com/show_bug.cgi?id=1152267



--- Comment #2 from Thomas Vander Stichele <[email protected]> ---
For reference, the puppet rules I have to set couchdb types:

  selinux::filecontext { "/var/log/${name}":
    seltype => 'couchdb_log_t'
  }

  selinux::filecontext { "/etc/${name}(/.*)?":
    seltype => 'couchdb_conf_t'
  }

  selinux::filecontext { "/var/lib/${name}(/.*)?":
    seltype => 'couchdb_var_lib_t'
  }

In selinux-policy, the file couchdb.fc could be adapted:

/etc/couchdb(/.*)?      gen_context(system_u:object_r:couchdb_conf_t,s0)

/etc/rc\.d/init\.d/couchdb      --     
gen_context(system_u:object_r:couchdb_initrc_exec_t,s0)

/usr/bin/couchdb        --     
gen_context(system_u:object_r:couchdb_exec_t,s0)

/var/lib/couchdb(/.*)?  gen_context(system_u:object_r:couchdb_var_lib_t,s0)

/var/log/couchdb(/.*)?  gen_context(system_u:object_r:couchdb_log_t,s0)

/var/run/couchdb(/.*)?  gen_context(system_u:object_r:couchdb_var_run_t,s0)

line 1/4/5 should be changed to accept couchdb-.* instead of just couchdb

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
erlang mailing list
[email protected]
https://lists.fedoraproject.org/mailman/listinfo/erlang

Reply via email to