summaryrefslogtreecommitdiffstats
path: root/selinux
diff options
context:
space:
mode:
authorkalebskeithley <kaleb@redhat.com>2020-07-08 21:20:30 +0200
committerGitHub <noreply@github.com>2020-07-08 21:20:30 +0200
commit05c523185b2d5ddd9e10f425c7e1f1ee1e409ba2 (patch)
tree560fbce753a3399de9a55f78aec18919f259556b /selinux
parentMerge pull request #35949 from zdover23/wip-doc-dev-guide-essentials-2020-07-07 (diff)
downloadceph-05c523185b2d5ddd9e10f425c7e1f1ee1e409ba2.tar.xz
ceph-05c523185b2d5ddd9e10f425c7e1f1ee1e409ba2.zip
selinux: allow ceph_t amqp_port_t:tcp_socket
allow ceph_t amqp_port_t:tcp_socket name_connect; allow ceph_t soundd_port_t:tcp_socket name_connect; Required for running RabbitMQ (soundd_port_t) for running RabbitMQ on port 8000 Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1854083 Signed-off-by: Kaleb S. KEITHLEY <kkeithle@redhat.com>
Diffstat (limited to 'selinux')
-rw-r--r--selinux/ceph.te2
1 files changed, 2 insertions, 0 deletions
diff --git a/selinux/ceph.te b/selinux/ceph.te
index c706c0c2991..2e710e1b1d4 100644
--- a/selinux/ceph.te
+++ b/selinux/ceph.te
@@ -88,6 +88,8 @@ corenet_tcp_sendrecv_cyphesis_port(ceph_t)
allow ceph_t commplex_main_port_t:tcp_socket name_connect;
allow ceph_t http_cache_port_t:tcp_socket name_connect;
+allow ceph_t amqp_port_t:tcp_socket name_connect;
+allow ceph_t soundd_port_t:tcp_socket name_connect;
corecmd_exec_bin(ceph_t)
corecmd_exec_shell(ceph_t)