From 3cf770c046f9a0c874aa7c2faacab0bedc47209f Mon Sep 17 00:00:00 2001 From: George Zaronikas Date: Tue, 24 Aug 2021 17:54:59 +0300 Subject: [PATCH] Fixing selinux policy. Resolves: rhbz#1964892 --- mod_proxy_cluster.fc | 2 +- mod_proxy_cluster.spec | 6 +++++- mod_proxy_cluster.te | 4 ++-- 3 files changed, 8 insertions(+), 4 deletions(-) diff --git a/mod_proxy_cluster.fc b/mod_proxy_cluster.fc index 1160104..a94035d 100644 --- a/mod_proxy_cluster.fc +++ b/mod_proxy_cluster.fc @@ -1 +1 @@ -/var/cache/mod_cluster(/.*)? gen_context(system_u:object_r:httpd_cache_t,s0) +/var/cache/httpd/mod_proxy_cluster(/.*)? gen_context(system_u:object_r:httpd_cache_t,s0) diff --git a/mod_proxy_cluster.spec b/mod_proxy_cluster.spec index 794715b..5ee7ec5 100644 --- a/mod_proxy_cluster.spec +++ b/mod_proxy_cluster.spec @@ -3,7 +3,7 @@ # Update commitid and serial when new sources and release info is available %global commitid 547fccb264f57ecdd5f7818ea2d8f9cfac28c4ed -%global serial 21 +%global serial 22 Name: mod_proxy_cluster Summary: JBoss mod_proxy_cluster for Apache httpd @@ -113,6 +113,10 @@ fi %changelog +* Wed Aug 18 2021 George Zaronikas - 1.3.14-22 +- Fixing selinux policy +- Related: rhbz#1964892 + * Wed Aug 18 2021 George Zaronikas - 1.3.14-21 - Correcting conf name in gating tests. - Related: rhbz#1964892 diff --git a/mod_proxy_cluster.te b/mod_proxy_cluster.te index b55406b..dcd933e 100644 --- a/mod_proxy_cluster.te +++ b/mod_proxy_cluster.te @@ -1,11 +1,11 @@ policy_module(mod_proxy_cluster, 1.0) -gen_tunable(httpd_mod_cluster, true) +gen_tunable(httpd_mod_proxy_cluster, true) require { type httpd_t; } -tunable_policy(`httpd_mod_cluster', ` +tunable_policy(`httpd_mod_proxy_cluster', ` corenet_udp_bind_http_port(httpd_t) ')