Actions
Issue #7780
closedSELinux denials on symlinking when galaxy-importer is run
Status:
CLOSED - CURRENTRELEASE
Priority:
Normal
Assignee:
Category:
Installer - Moved to GitHub issues
Sprint/Milestone:
-
Start date:
Due date:
Estimated time:
Severity:
2. Medium
Version:
Platform Release:
OS:
Triaged:
No
Groomed:
No
Sprint Candidate:
No
Tags:
SELinux
Sprint:
Sprint 85
Quarter:
Description
Per zpytela:
When the pulpcore resource worker runs galaxy-importer, tar is executed to extract files from the specified archive. Symbolic links can be present in the tarball, so the process needs the manage permissions.
(galaxy-importer is called by the plugin galaxy_ng.)
Already fixed in pulpcore-selinux, thank you zpytela! https://github.com/pulp/pulpcore-selinux/pull/31
This issue will be marked as fixed once pulp_installer includes the new pulpcore-selinux .
Actions
Problem: SELinux denials on symlinking when galaxy-importer
is run (by galaxy_ng content plugin)
Solution: Update pulpcore-selinux to 1.2.3, which includes the fix.
fixes: #7780