openstack/octavia
Code Issues Proposed changes

Merge "Force SELinux context for amphora keepalived process"

Browse Source
This commit is contained in:
Zuul 2018-01-08 16:48:10 +00:00 committed by Gerrit Code Review
commit b6f917f09f
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
octavia/amphorae/backends/agent/api_server/templates/keepalived.systemd.j2
View File

@ -4,6 +4,8 @@ After=network-online.target
Wants=network-online.target
[Service]
# Force context as we start keepalived under "ip netns exec"
SELinuxContext=system_u:system_r:keepalived_t:s0
Type=forking
KillMode=process
ExecStart=/sbin/ip netns exec {{ amphora_nsname }} {{ keepalived_cmd }} -D -d -f {{ keepalived_cfg }} -p {{ keepalived_pid }}