octavia/releasenotes/notes/fix-enforced-selinux-on-centos-27842ca6afbb500c.yaml
Gregory Thiemonge 044de8e52f Apply openstack-selinux policies in Centos amphorae
When enforcing SELinux, the commit enables the following SELinux
booleans:
- os_haproxy_enable_nsfs: it allows haproxy to run in a network
  namespace.
- os_haproxy_ping: it allows calls to the ping command from haproxy (for
  PING HMs)
- cluster_use_execmem

Change-Id: I4b5199d13d122b56619c4a2d21e86a06bd0dc3bf
(cherry picked from commit 3115589f2158bfe0196c8f9d3c105d16c35408f7)
(cherry picked from commit 995fe216e247a5763fc6719a0a887c9998370c30)
2022-08-22 16:32:53 +02:00

5 lines
88 B
YAML

---
fixes:
- |
Enable required SELinux booleans for CentOS or RHEL amphora image.