Project

Profile

Help

Send by e-mail

Issue #7780

SELinux denials on symlinking when galaxy-importer is run

Added by mdepaulo@redhat.com 3 months ago. Updated about 2 months ago.

Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
mdepaulo@redhat.com
Category:
Installer
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
SELinux
Sprint:
Sprint 85
Quarter:

Description

Per zpytela:

When the pulpcore resource worker runs galaxy-importer, tar is executed to extract files from the specified archive. Symbolic links can be present in the tarball, so the process needs the manage permissions.

(galaxy-importer is called by the plugin galaxy_ng.)

Already fixed in pulpcore-selinux, thank you zpytela! https://github.com/pulp/pulpcore-selinux/pull/31

This issue will be marked as fixed once pulp_installer includes the new pulpcore-selinux .

Associated revisions

Revision afeefdb3 View on GitHub
Added by Mike DePaulo 3 months ago

Problem: SELinux denials on symlinking when galaxy-importer

is run (by galaxy_ng content plugin)

Solution: Update pulpcore-selinux to 1.2.3, which includes the fix.

fixes: #7780

Revision afeefdb3 View on GitHub
Added by Mike DePaulo 3 months ago

Problem: SELinux denials on symlinking when galaxy-importer

is run (by galaxy_ng content plugin)

Solution: Update pulpcore-selinux to 1.2.3, which includes the fix.

fixes: #7780

History

#1 Updated by mdepaulo@redhat.com 3 months ago

  • Subject changed from SELinux errors on symlinking when galaxy-importer is run to SELinux denials on symlinking when galaxy-importer is run

#2 Updated by mdepaulo@redhat.com 3 months ago

  • Description updated (diff)

#3 Updated by pulpbot 3 months ago

  • Status changed from NEW to POST

#4 Updated by Anonymous 3 months ago

  • Status changed from POST to MODIFIED

#5 Updated by dkliban@redhat.com about 2 months ago

  • Status changed from MODIFIED to CLOSED - CURRENTRELEASE

Please register to edit this issue

Send by e-mail

Also available in: Atom PDF