HomePhorge

(PUP-2118) (#22330) add btrfs to SELinux filesystem whitelist
f73142ee2531Unpublished

Unpublished Commit ยท Learn More

Repository Importing: This repository is still importing.

Description

(PUP-2118) (#22330) add btrfs to SELinux filesystem whitelist

Many Linux distributions run SELinux in enforcing mode by default. On
these systems, it is critical that Puppet properly sets SELinux file
contexts on the files it manages, because incorrect contexts can lead
to spurious problems that can be very difficult to diagnose (e.g.,
system services that mysteriously fail to start).

In order to avoid errors caused by attempting to set SELinux file
contexts on filesystems that do not support them, Puppet maintains a
whitelist of filesystems that support SELinux file contexts, and only
attempts to set SELinux file contexts if the file resides on one of
the whitelisted filesystems.

The btrfs filesystem has supported SELinux file contexts (file xattr)
since 2009, and it is highly unlikely that any version of btrfs older
than that will be seen in the wild. (In 2009, about the only people
using btrfs were btrfs developers, and they have long since migrated
to more recent versions.)

However, the btrfs filesystem is not in Puppet's whitelist of
filesystems that support SELinux contexts.

This commit adds the btrfs filesystem to the whitelist of filesystem
supports SELinux file contexts.

Details

Provenance
James Ralston <ralston@pobox.com>Authored on
Adrien Thebo <git@somethingsinistral.net>Committed on Jan 11 2014, 9:28 PM
vanmeeuwenPushed on Jun 2 2015, 2:22 PM
Parents
rPU3cac0e2afc23: Merge pull request #2114 from nfagerlund/rpm_install_options_description
Branches
Unknown
Tags
Unknown

Event Timeline

Adrien Thebo <git@somethingsinistral.net> committed rPUf73142ee2531: (PUP-2118) (#22330) add btrfs to SELinux filesystem whitelist (authored by James Ralston <ralston@pobox.com>).Jan 11 2014, 9:28 PM