[node-patches] Change in ovirt-node[node-3.0]: selinux: Add some iscsi + misc rules

[fabiand at fedoraproject.org]

Fabian Deutsch has uploaded a new change for review.

Change subject: selinux: Add some iscsi + misc rules
......................................................................

selinux: Add some iscsi + misc rules

Change-Id: I10d2b1cea5c5c3b6e5fc00fdbbd911eefbe5ff0d
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1011193
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M semodule/ovirt.te.in
1 file changed, 12 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/27/21127/1

diff --git a/semodule/ovirt.te.in b/semodule/ovirt.te.in
index 2763fb3..3cd99c6 100644
--- a/semodule/ovirt.te.in
+++ b/semodule/ovirt.te.in
@@ -40,6 +40,18 @@
 allow policykit_t ovirt_t:dbus send_msg;
 allow local_login_t var_log_t:file { write create };
 
+
+# Remove this block once the bug is solved
+# Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1025401
+#============= initrc_t ==============
+allow initrc_t sshd_net_t:process dyntransition;
+allow initrc_t unconfined_t:process dyntransition;
+#============= iscsid_t ==============
+allow iscsid_t iscsi_var_lib_t:dir { write remove_name create add_name rmdir };
+allow iscsid_t iscsi_var_lib_t:file { write create unlink };
+allow iscsid_t iscsi_var_lib_t:lnk_file { create unlink };
+
+
 type ovirt_t;
 type ovirt_exec_t;
 init_daemon_domain(ovirt_t, ovirt_exec_t)


-- 
To view, visit http://gerrit.ovirt.org/21127
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I10d2b1cea5c5c3b6e5fc00fdbbd911eefbe5ff0d
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: node-3.0
Gerrit-Owner: Fabian Deutsch <fabiand at fedoraproject.org>