redhat-performance / quads

:calendar: The infrastructure deployment time machine
https://quads.dev
GNU General Public License v3.0
88 stars 36 forks source link

[RFE] Make QUADS support SELinux #519

Closed sadsfae closed 2 months ago

sadsfae commented 2 months ago

We never really bothered with leaving selinux enabled but some people do, this covers an RFE for making QUADS work with SELinux in enforcing.

The following changes are needed during RPM installation/upgrade at least.

semanage port -a -t http_port_t -p tcp 5000
semanage port -a -t http_port_t -p tcp 5001
chcon -R--type=httpd_sys_content_t /var/www/html
semanage fcontext -a -t httpd_sys_content_t  /var/www/html

The following additional dependencies are also required:

policycoreutils-python-utils

Deps:

checkpolicy
python3-audit
python3-libsemanage
python3-policycoreutils
python3-setools