CentOS: Enable os_dnsmasq_dac_override
... to avoid the following denial we've seen in CI.
avc: denied { dac_override } for pid=<pid> comm="dnsmasq"
capability=1 scontext=system_u:system_r:dnsmasq_t:s0
tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability permissive=1
Change-Id: Icebf83caca27f9079e538d45432c894dfd071aae
This commit is contained in:
@@ -62,6 +62,13 @@ class openstack_integration::neutron (
|
||||
persistent => true,
|
||||
value => on,
|
||||
}
|
||||
|
||||
if $driver == 'openvswitch' or $driver == 'linuxbridge' {
|
||||
selboolean { 'os_dnsmasq_dac_override':
|
||||
persistent => true,
|
||||
value => on,
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
openstack_integration::mq_user { 'neutron':
|
||||
|
||||
Reference in New Issue
Block a user