openstack/tripleo-heat-templates
Code Issues Proposed changes

Change setype for non container /var/log/<service> directories

Browse Source 
/var/log/<service> is not used by containers, therefore setype
svirt_sandbox_file_t is not required. This changes it to the
default var_log_t.

Change-Id: I870f6f5286ac9222d6d8fbdcb48fe6b6559993ba
This commit is contained in:
Martin Schuppert 2019-04-26 14:53:37 +02:00
parent 2d50c070ef
commit 5906f45ffe
13 changed files with 13 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
deployment/logging/files/barbican-api.yaml
View File

@ -41,7 +41,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/barbican, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/barbican-api, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/barbican, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/barbican, 'setype': var_log_t }
- name: barbican logs readme
copy:
dest: /var/log/barbican/readme.txt

2
deployment/logging/files/heat-api-cfn.yaml
View File

@ -27,7 +27,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/heat-api-cfn, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': var_log_t }
- name: heat logs readme
copy:
dest: /var/log/heat/readme.txt

2
deployment/logging/files/heat-api.yaml
View File

@ -27,7 +27,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/heat-api, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': var_log_t }
- name: heat logs readme
copy:
dest: /var/log/heat/readme.txt

2
deployment/logging/files/heat-engine.yaml
View File

@ -41,7 +41,7 @@ outputs:
setype: "{{ item.setype }}"
with_items:
- { 'path': /var/log/containers/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/heat, 'setype': var_log_t }
- name: heat logs readme
copy:
dest: /var/log/heat/readme.txt

2
deployment/logging/files/keystone.yaml
View File

@ -42,7 +42,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/keystone, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/keystone, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/keystone, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/keystone, 'setype': var_log_t }
- name: keystone logs readme
copy:
dest: /var/log/keystone/readme.txt

2
deployment/logging/files/neutron-api.yaml
View File

@ -50,7 +50,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/neutron, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/neutron-api, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/neutron, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/neutron, 'setype': var_log_t }
- name: neutron logs readme
copy:
dest: /var/log/neutron/readme.txt

2
deployment/logging/files/neutron-common.yaml
View File

@ -37,7 +37,7 @@ outputs:
setype: "{{ item.setype }}"
with_items:
- { 'path': /var/log/containers/neutron, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/neutron, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/neutron, 'setype': var_log_t }
- name: neutron logs readme
copy:
dest: /var/log/neutron/readme.txt

2
deployment/logging/files/nova-api.yaml
View File

@ -53,7 +53,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/nova-api, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': var_log_t }
- name: nova logs readme
copy:
dest: /var/log/nova/readme.txt

2
deployment/logging/files/nova-common.yaml
View File

@ -72,7 +72,7 @@ outputs:
state: directory
with_items:
- { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': var_log_t }
- name: nova logs readme
copy:
dest: /var/log/nova/readme.txt

2
deployment/logging/files/nova-metadata.yaml
View File

@ -39,7 +39,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/nova-metadata, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/nova, 'setype': var_log_t }
- name: nova logs readme
copy:
dest: /var/log/nova/readme.txt

2
deployment/logging/files/opendaylight-api.yaml
View File

@ -24,7 +24,7 @@ outputs:
setype: "{{ item.setype }}"
with_items:
- { 'path': /var/log/containers/opendaylight/karaf/logs, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/opendaylight, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/opendaylight, 'setype': var_log_t }
- name: opendaylight logs readme
copy:
dest: /var/log/opendaylight/readme.txt

2
deployment/logging/files/panko-api.yaml
View File

@ -41,7 +41,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/panko, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/panko-api, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/panko, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/panko, 'setype': var_log_t }
- name: panko logs readme
copy:
dest: /var/log/panko/readme.txt

2
deployment/logging/files/placement-api.yaml
View File

@ -39,7 +39,7 @@ outputs:
with_items:
- { 'path': /var/log/containers/placement, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/containers/httpd/placement, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/placement, 'setype': svirt_sandbox_file_t }
- { 'path': /var/log/placement, 'setype': var_log_t }
- name: Placement logs readme
copy:
dest: /var/log/placement/readme.txt