Skip to content

Commit ef19106

Browse files
committed
selinux: Allow ceph to read udev db
We are using libudev and reading the udev db files because of that. We need to allow ceph to access these files in the SELinux policy. Signed-off-by: Boris Ranto <[email protected]>
1 parent fc597d4 commit ef19106

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

selinux/ceph.te

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -105,6 +105,8 @@ logging_send_syslog_msg(ceph_t)
105105

106106
sysnet_dns_name_resolve(ceph_t)
107107

108+
udev_read_db(ceph_t)
109+
108110
allow ceph_t nvme_device_t:blk_file { getattr ioctl open read write };
109111

110112
# basis for future security review

0 commit comments

Comments
 (0)