summaryrefslogtreecommitdiffstats
path: root/selinux/ceph.fc
diff options
context:
space:
mode:
authorBoris Ranto <branto@redhat.com>2016-02-11 12:03:06 +0100
committerBoris Ranto <branto@redhat.com>2016-02-11 12:37:51 +0100
commitbcf12049fb2241d4345bbadc08b4dd4fe670bab9 (patch)
treeda002f3928e2deeabb704979ff1979c5bd5b20bb /selinux/ceph.fc
parentMerge pull request #7601 from jjhuo/master (diff)
downloadceph-bcf12049fb2241d4345bbadc08b4dd4fe670bab9.tar.xz
ceph-bcf12049fb2241d4345bbadc08b4dd4fe670bab9.zip
selinux: Allow log files to be located in /var/log/radosgw
We do suggest users to put their logs in /var/log/radosgw in the documentation at times. We should also label that directory with ceph_var_log_t so that ceph daemons can also write there. The commit also updates the man page for this policy. This man page is automatically generated by * sepolicy manpage -p . -d ceph_t and have not been reloaded in a while. Hence, it contains few more changes than the new radosgw directory. Signed-off-by: Boris Ranto <branto@redhat.com>
Diffstat (limited to 'selinux/ceph.fc')
-rw-r--r--selinux/ceph.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/selinux/ceph.fc b/selinux/ceph.fc
index 6b8d06254e8..31926895c46 100644
--- a/selinux/ceph.fc
+++ b/selinux/ceph.fc
@@ -9,5 +9,6 @@
/var/lib/ceph(/.*)? gen_context(system_u:object_r:ceph_var_lib_t,s0)
/var/log/ceph(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
+/var/log/radosgw(/.*)? gen_context(system_u:object_r:ceph_log_t,s0)
/var/run/ceph(/.*)? gen_context(system_u:object_r:ceph_var_run_t,s0)