Add local element for selinux policy updates

elements/selinux-policy-updates/README.md

@@ -0,0 +1 @@
+General catch all element to apply custom policy.

elements/selinux-policy-updates/install.d/01-policycoreutils-python

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -eux
+
+install-packages policycoreutils-python

elements/selinux-policy-updates/install.d/10-mysql-socket-selinux

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+set -eux
+
+mkdir -p /opt/stack/selinux-policy
+
+# This policy fixes
+# https://bugs.launchpad.net/tripleo/+bug/1339395
+cp $(dirname $0)/../mysql_socket.pp /opt/stack/selinux-policy
+cp $(dirname $0)/../mysql_socket.te /opt/stack/selinux-policy

elements/selinux-policy-updates/mysql_socket.te

@@ -0,0 +1,11 @@
+
+module mypol 1.0;
+
+require {
+	type tram_port_t;
+	type mysqld_t;
+	class tcp_socket name_bind;
+}
+
+#============= mysqld_t ==============
+allow mysqld_t tram_port_t:tcp_socket name_bind;

elements/selinux-policy-updates/os-refresh-config/pre-configure.d/98-mysql-socket-selinux

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+set -eux
+
+semodule -i /opt/stack/selinux-policy/mysql_socket.pp