[node-patches] Change in ovirt-node[ovirt-3.5]: init: Run handlers as unconfied_t

[fabiand at redhat.com]

Fabian Deutsch has uploaded a new change for review.

Change subject: init: Run handlers as unconfied_t
......................................................................

init: Run handlers as unconfied_t

A previous patch allows the transition to unconfined_t, but now we
explicitly run the hooks as unconfined_t.

Change-Id: Ib61283689df7423dfcac852df437479f357b7735
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1207155
Signed-off-by: Fabian Deutsch <fabiand at fedoraproject.org>
---
M scripts/ovirt-init-functions.sh.in
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.ovirt.org:29418/ovirt-node refs/changes/79/39479/1

diff --git a/scripts/ovirt-init-functions.sh.in b/scripts/ovirt-init-functions.sh.in
index cb3d955..44f22c2 100644
--- a/scripts/ovirt-init-functions.sh.in
+++ b/scripts/ovirt-init-functions.sh.in
@@ -1480,7 +1480,7 @@
             for handler in "$HOOK_ON_BOOT_DIR"/*;
             do
                 log "Running handler: $handler"
-                "$handler" >> $OVIRT_LOGFILE 2>&1
+                runcon -t unconfined_t "$handler" 2>&1
             done
         fi
 


-- 
To view, visit https://gerrit.ovirt.org/39479
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ib61283689df7423dfcac852df437479f357b7735
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.5
Gerrit-Owner: Fabian Deutsch <fabiand at redhat.com>
Gerrit-Reviewer: Fabian Deutsch <fabiand at redhat.com>