summaryrefslogtreecommitdiffstats
path: root/selinux
diff options
context:
space:
mode:
authorKefu Chai <kchai@redhat.com>2017-06-02 10:17:04 +0200
committerSage Weil <sage@redhat.com>2017-06-02 19:06:50 +0200
commit8f6a526f9a36ff847755cba68b6b78b37e8e99cb (patch)
tree77e1edce762d68c8309fb418ef6548f7144b9903 /selinux
parentqa/tasks: add a blacklist for flush_pg_stats() (diff)
downloadceph-8f6a526f9a36ff847755cba68b6b78b37e8e99cb.tar.xz
ceph-8f6a526f9a36ff847755cba68b6b78b37e8e99cb.zip
selinux: clip the ceph context to ceph-mgr also
Signed-off-by: Kefu Chai <kchai@redhat.com>
Diffstat (limited to 'selinux')
-rw-r--r--selinux/ceph.fc1
1 files changed, 1 insertions, 0 deletions
diff --git a/selinux/ceph.fc b/selinux/ceph.fc
index 31926895c46..df47fe10b49 100644
--- a/selinux/ceph.fc
+++ b/selinux/ceph.fc
@@ -1,6 +1,7 @@
/etc/rc\.d/init\.d/ceph -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
/etc/rc\.d/init\.d/radosgw -- gen_context(system_u:object_r:ceph_initrc_exec_t,s0)
+/usr/bin/ceph-mgr -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-mon -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-mds -- gen_context(system_u:object_r:ceph_exec_t,s0)
/usr/bin/ceph-osd -- gen_context(system_u:object_r:ceph_exec_t,s0)