Skip to content

ENT-14018: Added missing RHEL9 SELinux rules#6098

Open
aleksandrychev wants to merge 1 commit intocfengine:masterfrom
aleksandrychev:ENT-14018
Open

ENT-14018: Added missing RHEL9 SELinux rules#6098
aleksandrychev wants to merge 1 commit intocfengine:masterfrom
aleksandrychev:ENT-14018

Conversation

@aleksandrychev
Copy link
Copy Markdown
Contributor

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:

  • cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
  • cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018

@aleksandrychev
Copy link
Copy Markdown
Contributor Author

@cf-bottom jenkins please

@aleksandrychev aleksandrychev marked this pull request as draft April 29, 2026 09:47
@cf-bottom
Copy link
Copy Markdown

@aleksandrychev
Copy link
Copy Markdown
Contributor Author

@aleksandrychev
Copy link
Copy Markdown
Contributor Author

@craigcomstock with this change after few agents runs I see:

ausearch -m avc -ts recent
<no matches>

and I received scheduled email

@aleksandrychev aleksandrychev marked this pull request as ready for review April 29, 2026 13:54
Copy link
Copy Markdown
Contributor

@craigcomstock craigcomstock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

a little refactor is needed I think.

Comment thread misc/selinux/cfengine-enterprise.te.all Outdated
Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:
 - cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
 - cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018
Signed-off-by: Ihor Aleksandrychiev <ihor.aleksandrychiev@northern.tech>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants