Add role icinga2adm_r to SELinux policies #9664
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
By default, newly-created files and directories inherit the SELinux type of their parent directories. This is how we've been doing things for a while now, but behaviour seems to have changed for some systems.
So it is required for
role icinga2adm_r
, setting the role to our SELinux admin level role, to be called before callinguserdom_unpriv_user_template(icinga2adm)
to allow for proper role and domain creation.I've tested this on RHEL 9:
Without this fix, this command doesn't print anything.
See Issue icinga-packaging/#276 for more info.