[node-patches] Change in ovirt-node[ovirt-3.6]: ovirt.te.in: update iptables_t rules

Code Review gerrit at ovirt.org
Tue Jan 10 19:02:26 UTC 2017


>From Douglas Schilling Landgraf <dougsland at redhat.com>:

Douglas Schilling Landgraf has submitted this change and it was merged.

Change subject: ovirt.te.in: update iptables_t rules
......................................................................


ovirt.te.in: update iptables_t rules

Avoid boot AVC:

type=AVC msg=audit(1482319168.924:51): avc:  denied  { read }
for  pid=1998 comm="iptables" name="xtables.lock" dev="tmpfs"
ino=23877 scontext=system_u:system_r:iptables_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_run_t:s0 tclass=file

Change-Id: I9d9b2edb39cf5315c9570ee12b2b276403c970db
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1406673
Signed-off-by: Douglas Schilling Landgraf <dougsland at redhat.com>
(cherry picked from commit abc33c7524f1b9bd5498c4f17dd6a635ecde72aa)
---
M semodule/ovirt.te.in
1 file changed, 2 insertions(+), 0 deletions(-)

Approvals:
  Douglas Schilling Landgraf: Verified; Looks good to me, approved; Passed CI tests



-- 
To view, visit https://gerrit.ovirt.org/69944
To unsubscribe, visit https://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I9d9b2edb39cf5315c9570ee12b2b276403c970db
Gerrit-PatchSet: 1
Gerrit-Project: ovirt-node
Gerrit-Branch: ovirt-3.6
Gerrit-Owner: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Douglas Schilling Landgraf <dougsland at redhat.com>
Gerrit-Reviewer: Jenkins CI
Gerrit-Reviewer: gerrit-hooks <automation at ovirt.org>


More information about the node-patches mailing list