Fabian Deutsch has uploaded a new change for review.

Change subject: init: Run handlers as unconfied_t
......................................................................

init: Run handlers as unconfied_t

A previous patch allows the transition to unconfined_t, but now we
explicitly run the hooks as unconfined_t.

Change-Id: Ib61283689df7423dfcac852df437479f357b7735
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1207155
Signed-off-by: Fabian Deutsch <[email protected]>
---
M scripts/ovirt-init-functions.sh.in
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/78/39478/1

diff --git a/scripts/ovirt-init-functions.sh.in 
b/scripts/ovirt-init-functions.sh.in
index be153af..f7e20a7 100644
--- a/scripts/ovirt-init-functions.sh.in
+++ b/scripts/ovirt-init-functions.sh.in
@@ -1484,7 +1484,7 @@
             for handler in "$HOOK_ON_BOOT_DIR"/*;
             do
                 log "Running handler: $handler"
-                "$handler" >> $OVIRT_LOGFILE 2>&1
+                runcon -t unconfined_t "$handler" 2>&1
             done
         fi
 


-- 
To view, visit https://gerrit.ovirt.org/39478
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib61283689df7423dfcac852df437479f357b7735
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: master
Gerrit-Owner: Fabian Deutsch <[email protected]>
Gerrit-Reviewer: Fabian Deutsch <[email protected]>
_______________________________________________
node-patches mailing list
[email protected]
http://lists.ovirt.org/mailman/listinfo/node-patches

Reply via email to